发布于3月6日3月6日 Members Red Hat: CVE-2024-35950: kernel: drm/client: Fully protect modes[] with dev->mode_config.mutex (Multiple Advisories) Severity 5 CVSS (AV:L/AC:L/Au:S/C:N/I:N/A:C) Published 05/20/2024 Created 07/26/2024 Added 07/25/2024 Modified 12/12/2024 Description In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains pointers to modes on the connectors' mode lists, which are protected by dev->mode_config.mutex. Thus we need to extend modes[] the same protection or by the time we use it the elements may already be pointing to freed/reused memory. Solution(s) redhat-upgrade-kernel redhat-upgrade-kernel-rt References CVE-2024-35950 RHSA-2024:4823 RHSA-2024:4831 RHSA-2024:9315 RHSA-2024:9546
