CVE-2024-46851

Summary

CVE-2024-46851 is a vulnerability affecting the Linux kernel's drm/amd/display subsystem. This issue arises due to a race condition between the functions dcn10_set_drr() and dc_state_destruct(). During this race, dc_state_destruct() nulls the resource context of the DC state, and the pipe context passed to dcn10_set_drr() is a member of this resource context. If dc_state_destruct() is called concurrently with IRQ processing, which invokes dcn10_set_drr(), the function can end up using already nulled callback fields of struct stream_resource. To mitigate this race condition, a local copy of the timing generator (tg) should be used instead of the original one for all operations, ensuring the timing generators do not get freed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.