CVE-2024-46850

Summary

CVE-2024-46850 is a vulnerability affecting the Linux kernel's drm/amd/display subsystem. The issue arises from a race condition between the functions dcn35_set_drr() and dc_state_destruct(). During this race, dc_state_destruct() nulls the resource context of the DC state, which is then used by dcn35_set_drr(). If dc_state_destruct() is called concurrently with IRQ processing, the function callback fields of struct stream_resource may become null. To mitigate this issue, the recommended solution is to copy the resource context (tg) to a local variable before performing any operations on it. This should prevent the race condition as long as the resource pool where the timing generators reside is not freed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.