CVE-2024-58074

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Grab intel_display from the encoder to avoid potential oopsies

Grab the intel_display from 'encoder' rather than 'state' in the encoder hooks to avoid the massive footgun that is intel_sanitize_encoder(), which passes NULL as the 'state' argument to encoder .disable() and .post_disable().

TODO: figure out how to actually fix intel_sanitize_encoder()...

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= ab0b0eb5c85c5961913bdb9b8011cc8f5c14978a, < 3a03ef592ef9b900698b46703015f9134721479c; >= ab0b0eb5c85c5961913bdb9b8011cc8f5c14978a, < 1885401569f24eb35c631bcc4e6543360dbe9292; >= ab0b0eb5c85c5961913bdb9b8011cc8f5c14978a, < dc3806d9eb66d0105f8d55d462d4ef681d9eac59
LinuxLinux6.12

References

Timeline

Published
Mar 6, 2025
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-580755.5In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - do not transfer req when tegra init fails The tegra_cmCVE-2024-580765.5In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-sm6350: Add missing parent_map for two clocks If a clk_CVE-2024-580775.5In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback commit 1f5CVE-2024-580785.5In the Linux kernel, the following vulnerability has been resolved: misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors CVE-2024-580795.5In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We useCVE-2024-58084.3The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the email list, which coCVE-2024-580805.5In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-sm6350: Add missing parent_map for a clock If a clk_CVE-2024-580815.5In the Linux kernel, the following vulnerability has been resolved: clk: mmp2: call pm_genpd_init() only after genpd.name is set Setting tCVE-2024-580825.5In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: Fix an error check in npcm_video_ece_init() When functCVE-2024-580837.8In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() ExpliciCVE-2024-580845.5In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pooCVE-2024-580855.5In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyo_write_control() syzbot is reporti
CVE-2024-58074: Medium severity, CVSS 5.5 | Vulnix