CVE-2024-22386
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Summary
CVE-2024-22386 is a vulnerability found in the Linux kernel's drm/exynos device driver, specifically in the exynos_drm_crtc_atomic_disable() function. This vulnerability can lead to a null pointer dereference issue, potentially causing a kernel panic or denial of service. The affected products include various versions of ohMfk7, Qtrc2o, ohMfk4, Qtrc2i, and many others. To remediate this vulnerability, users should apply the necessary patches or updates provided by the Linux kernel maintainers. The potential danger posed by this vulnerability is considered medium with a base severity score of 4.7 out of 10. The exploitability score is 1.0 out of 10, indicating that it is relatively easy to exploit. The attack vector is local, requiring low privileges and no user interaction. While there is no impact on confidentiality or integrity, the availability impact is high.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions