SB2025012045 - Improper locking in Linux kernel dc core driver

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper locking (CVE-ID: CVE-2024-57918)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the remove_all_phantom_planes_for_stream() function in drivers/gpu/drm/amd/display/dc/dml2/dml2_mall_phantom.c, within the dc_state_add_plane(), dc_state_rem_all_planes_for_stream() and dc_state_rem_all_phantom_planes_for_stream() functions in drivers/gpu/drm/amd/display/dc/core/dc_state.c, within the commit_minimal_transition_based_on_current_context() function in drivers/gpu/drm/amd/display/dc/core/dc.c. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/37b8de96ae48c7bb1a17cd5585195c43fcacbe94
• https://git.kernel.org/stable/c/7de8d5c90be9ad9f6575e818a674801db2ada794
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.10
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.13