CVE-2024-26607
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 29, 2024
Updated: Jan 9, 2025
CWE ID 476
Summary
CVE-2024-26607 is a vulnerability affecting the Linux kernel's sii902x driver. The issue stems from a race condition between the probing of sii902x and tidss devices. Specifically, sii902x calls drm_bridge_add() before setting up the i2c interface, which is required for sii902x_bridge_get_edid(). As tidss later probes the system and initiates a call to sii902x_bridge_get_edid(), a null pointer dereference results, causing a crash. This vulnerability has been resolved by moving drm_bridge_add() to the end of sii902x_init().
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.