Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-35919
HistoryMay 19, 2024 - 10:10 a.m.

CVE-2024-35919 media: mediatek: vcodec: adding lock to protect encoder context list

2024-05-1910:10:31
Linux
github.com
3
linux kernel
mediatek
vcodec
lock
encoder context list

AI Score

7.2

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: adding lock to protect encoder context list

Add a lock for the ctx_list, to avoid accessing a NULL pointer
within the ‘vpu_enc_ipi_handler’ function when the ctx_list has
been deleted due to an unexpected behavior on the SCP IP block.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "1972e32431ed",
        "lessThan": "41671f0c0182",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "1972e32431ed",
        "lessThan": "51c84a8aac6e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "1972e32431ed",
        "lessThan": "afaaf3a0f647",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/media/platform/mediatek/vcodec/common/mtk_vcodec_fw_vpu.c",
      "drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c",
      "drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.h",
      "drivers/media/platform/mediatek/vcodec/encoder/venc_vpu_if.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.6"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.6",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.27",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.8.6",
        "versionType": "custom",
        "lessThanOrEqual": "6.8.*"
      },
      {
        "status": "unaffected",
        "version": "6.9",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/media/platform/mediatek/vcodec/common/mtk_vcodec_fw_vpu.c",
      "drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c",
      "drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.h",
      "drivers/media/platform/mediatek/vcodec/encoder/venc_vpu_if.c"
    ],
    "defaultStatus": "affected"
  }
]

AI Score

7.2

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial