CVE-2024-53051
MEDIUM severity · CVSS 5.5
5.5CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability Sometimes during hotplug scenario or suspend/resume scenario encoder is not always initialized when intel_hdcp_get_capability add a check to avoid kernel null pointer dereference.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/31b42af516afa1e184d1a9f9dd4096c54044269a ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/31b42af516afa1e184d1a9f9dd4096c54044269aPatch
- https://git.kernel.org/stable/c/4912e8fb3c37fb2dedf48d9c18bbbecd70e720f8Patch
- https://git.kernel.org/stable/c/b402f41a3095552d854b4ae670220f46410e8937
- https://git.kernel.org/stable/c/df17aa6038f96355640ace6ef3c3ff59c10c633f