CVE-2024-35919

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: adding lock to protect encoder context list

Add a lock for the ctx_list, to avoid accessing a NULL pointer within the 'vpu_enc_ipi_handler' function when the ctx_list has been deleted due to an unexpected behavior on the SCP IP block.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1972e32431ed14682909ad568c6fd660572ae6ab < 41671f0c0182b2bae74ca7e3b0f155559e3e2fc5affected
LinuxLinux1972e32431ed14682909ad568c6fd660572ae6ab < 51c84a8aac6e3b59af2b0e92ba63cabe2e641a2daffected
LinuxLinux1972e32431ed14682909ad568c6fd660572ae6ab < afaaf3a0f647a24a7bf6a2145d8ade37baaf75adaffected
LinuxLinux6.6affected
LinuxLinux0 < 6.6unaffected
LinuxLinux6.6.27 <= 6.6.*unaffected
LinuxLinux6.8.6 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References