CVE-2024-35927

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

drm: Check output polling initialized before disabling

In drm_kms_helper_poll_disable() check if output polling

support is initialized before disabling polling. If not flag

this as a warning.

Additionally in drm_mode_config_helper_suspend() and

drm_mode_config_helper_resume() calls, that re the callers of these

functions, avoid invoking them if polling is not initialized.

For drivers like hyperv-drm, that do not initialize connector

polling, if suspend is called without this check, it leads to

suspend failure with following stack

[ 770.719392] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done.

[ 770.720592] printk: Suspending console(s) (use no_console_suspend to debug)

[ 770.948823] ------------[ cut here ]------------

[ 770.948824] WARNING: CPU: 1 PID: 17197 at kernel/workqueue.c:3162 __flush_work.isra.0+0x212/0x230

[ 770.948831] Modules linked in: rfkill nft_counter xt_conntrack xt_owner udf

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References