CVE-2024-50003

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50003

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor [Why] Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure and call the drm_client_modeset_probe() while struct drm_connector connector->dev->master is NULL. It will mess up the pipe topology after resume. [How] Skip the TBT monitor HPD during the resume procedure because we currently will probe the connectors after resume by default. (cherry picked from commit 453f86a26945207a16b8f66aaed5962dc2b95b85)

References
Link Resource
https://git.kernel.org/stable/c/52d4e3fb3d340447dcdac0e14ff21a764f326907 Patch
https://git.kernel.org/stable/c/68d603f467a75618eeae5bfe8af32cda47097010 Patch
https://git.kernel.org/stable/c/722d2d8fc423108597b97efbf165187d16d9aa1e Patch
https://git.kernel.org/stable/c/73e441be033d3ed0bdff09b575da3e7d4606ffc9 Patch
https://git.kernel.org/stable/c/c2356296f546326f9f06c109e201d42201e1e783 Patch
https://git.kernel.org/stable/c/eb9329cd882aa274e92bdb1003bc088433fdee86 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
History

03 Nov 2025, 23:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

01 Nov 2024, 15:16

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/52d4e3fb3d340447dcdac0e14ff21a764f326907 - () https://git.kernel.org/stable/c/52d4e3fb3d340447dcdac0e14ff21a764f326907 - Patch
References () https://git.kernel.org/stable/c/68d603f467a75618eeae5bfe8af32cda47097010 - () https://git.kernel.org/stable/c/68d603f467a75618eeae5bfe8af32cda47097010 - Patch
References () https://git.kernel.org/stable/c/722d2d8fc423108597b97efbf165187d16d9aa1e - () https://git.kernel.org/stable/c/722d2d8fc423108597b97efbf165187d16d9aa1e - Patch
References () https://git.kernel.org/stable/c/73e441be033d3ed0bdff09b575da3e7d4606ffc9 - () https://git.kernel.org/stable/c/73e441be033d3ed0bdff09b575da3e7d4606ffc9 - Patch
References () https://git.kernel.org/stable/c/c2356296f546326f9f06c109e201d42201e1e783 - () https://git.kernel.org/stable/c/c2356296f546326f9f06c109e201d42201e1e783 - Patch
References () https://git.kernel.org/stable/c/eb9329cd882aa274e92bdb1003bc088433fdee86 - () https://git.kernel.org/stable/c/eb9329cd882aa274e92bdb1003bc088433fdee86 - Patch
First Time Linux
Linux linux Kernel

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Se soluciona el bloqueo del sistema durante la reanudación con el monitor TBT [Por qué] Conectado con un monitor Thunderbolt y realizando la suspensión, el sistema puede bloquearse durante la reanudación. El HPD del monitor TBT se activará durante el procedimiento de reanudación y llamará a drm_client_modeset_probe() mientras struct drm_connector connector->dev->master sea NULL. Esto arruinará la topología de la tubería después de la reanudación. [Cómo] Omitir el HPD del monitor TBT durante el procedimiento de reanudación porque actualmente sondearemos los conectores después de la reanudación de forma predeterminada. (seleccionado de el commit 453f86a26945207a16b8f66aaed5962dc2b95b85)

21 Oct 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 19:15

Updated : 2025-11-03 23:16

NVD link : CVE-2024-50003

Mitre link : CVE-2024-50003

CVE.ORG link : CVE-2024-50003

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference