CVE-2024-50266

Summary

CVE-2024-50266: A recently identified issue in the Linux kernel affects the clk subsystem, specifically the qcom driver for the videocc-sm8350 component. This vulnerability can cause a stuck clock condition on certain devices, such as the Lenovo ThinkPad X13s, during video streaming in Firefox. The root cause is a change in the venus driver that now requires the hardware control mode to be changed at runtime. The issue can be traced to the clk_branch_wait function in clk-branch.c, and can lead to system warnings and hanging CPU processes. To mitigate this vulnerability, users are advised to update the sm8350/sc8280xp GDSC definitions to enable runtime control of the hardware mode. (Source: Provided information)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.