CVE-2024-35950
Assigner: Linux
Published: 2024-05-20T09:41:45.333Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

drm/client: Fully protect modes[] with dev->mode_config.mutex

The modes[] array contains pointers to modes on the connectors'
mode lists, which are protected by dev->mode_config.mutex.
Thus we need to extend modes[] the same protection or by the
time we use it the elements may already be pointing to
freed/reused memory.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: 5a2f957e3c45
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 41586487769e
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: d2dc6600d4e3
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 18c8cc6680ce
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 04e018bd913d
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 8ceb873d8167
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 3eadd887dbac
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 5.4.275
lessThanOrEqual: 5.4.*
status: unaffected
versionType: custom
version: 5.10.216
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.15.156
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 6.1.87
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.6.28
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.8.7
lessThanOrEqual: 6.8.*
status: unaffected
versionType: custom
version: 6.9
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: drm/client: Fully protect modes[] with dev->mode_config.mutex
x_generator: engine: bippy-d175d3acf727