drm/i915: Grab intel_display from the encoder to avoid potential oopsies
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.114, 6.13.2
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Grab intel_display from the encoder to avoid potential oopsies Grab the intel_display from 'encoder' rather than 'state' in the encoder hooks to avoid the massive footgun that is intel_sanitize_encoder(), which passes NULL as the 'state' argument to encoder .disable() and .post_disable(). TODO: figure out how to actually fix intel_sanitize_encoder()...
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From ab0b0eb5c85c5961913bdb9b8011cc8f5c14978a · fixed in 3a03ef592ef9b900698b46703015f9134721479c; From ab0b0eb5c85c5961913bdb9b8011cc8f5c14978a · fixed in 1885401569f24eb35c631bcc4e6543360dbe9292; From ab0b0eb5c85c5961913bdb9b8011cc8f5c14978a · fixed in dc3806d9eb66d0105f8d55d462d4ef681d9eac59
- Linux Linux
6.12
- KernelLinux
From 6.12.0 · fixed in 6.12.114; From 6.13.0 · fixed in 6.13.2