CVE-2024-40916

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found<br /> <br /> When reading EDID fails and driver reports no modes available, the DRM<br /> core adds an artificial 1024x786 mode to the connector. Unfortunately<br /> some variants of the Exynos HDMI (like the one in Exynos4 SoCs) are not<br /> able to drive such mode, so report a safe 640x480 mode instead of nothing<br /> in case of the EDID reading failure.<br /> <br /> This fixes the following issue observed on Trats2 board since commit<br /> 13d5b040363c ("drm/exynos: do not return negative values from .get_modes()"):<br /> <br /> [drm] Exynos DRM: using 11c00000.fimd device for DMA mapping operations<br /> exynos-drm exynos-drm: bound 11c00000.fimd (ops fimd_component_ops)<br /> exynos-drm exynos-drm: bound 12c10000.mixer (ops mixer_component_ops)<br /> exynos-dsi 11c80000.dsi: [drm:samsung_dsim_host_attach] Attached s6e8aa0 device (lanes:4 bpp:24 mode-flags:0x10b)<br /> exynos-drm exynos-drm: bound 11c80000.dsi (ops exynos_dsi_component_ops)<br /> exynos-drm exynos-drm: bound 12d00000.hdmi (ops hdmi_component_ops)<br /> [drm] Initialized exynos 1.1.0 20180330 for exynos-drm on minor 1<br /> exynos-hdmi 12d00000.hdmi: [drm:hdmiphy_enable.part.0] *ERROR* PLL could not reach steady state<br /> panel-samsung-s6e8aa0 11c80000.dsi.0: ID: 0xa2, 0x20, 0x8c<br /> exynos-mixer 12c10000.mixer: timeout waiting for VSYNC<br /> ------------[ cut here ]------------<br /> WARNING: CPU: 1 PID: 11 at drivers/gpu/drm/drm_atomic_helper.c:1682 drm_atomic_helper_wait_for_vblanks.part.0+0x2b0/0x2b8<br /> [CRTC:70:crtc-1] vblank wait timed out<br /> Modules linked in:<br /> CPU: 1 PID: 11 Comm: kworker/u16:0 Not tainted 6.9.0-rc5-next-20240424 #14913<br /> Hardware name: Samsung Exynos (Flattened Device Tree)<br /> Workqueue: events_unbound deferred_probe_work_func<br /> Call trace:<br /> unwind_backtrace from show_stack+0x10/0x14<br /> show_stack from dump_stack_lvl+0x68/0x88<br /> dump_stack_lvl from __warn+0x7c/0x1c4<br /> __warn from warn_slowpath_fmt+0x11c/0x1a8<br /> warn_slowpath_fmt from drm_atomic_helper_wait_for_vblanks.part.0+0x2b0/0x2b8<br /> drm_atomic_helper_wait_for_vblanks.part.0 from drm_atomic_helper_commit_tail_rpm+0x7c/0x8c<br /> drm_atomic_helper_commit_tail_rpm from commit_tail+0x9c/0x184<br /> commit_tail from drm_atomic_helper_commit+0x168/0x190<br /> drm_atomic_helper_commit from drm_atomic_commit+0xb4/0xe0<br /> drm_atomic_commit from drm_client_modeset_commit_atomic+0x23c/0x27c<br /> drm_client_modeset_commit_atomic from drm_client_modeset_commit_locked+0x60/0x1cc<br /> drm_client_modeset_commit_locked from drm_client_modeset_commit+0x24/0x40<br /> drm_client_modeset_commit from __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0xc4<br /> __drm_fb_helper_restore_fbdev_mode_unlocked from drm_fb_helper_set_par+0x2c/0x3c<br /> drm_fb_helper_set_par from fbcon_init+0x3d8/0x550<br /> fbcon_init from visual_init+0xc0/0x108<br /> visual_init from do_bind_con_driver+0x1b8/0x3a4<br /> do_bind_con_driver from do_take_over_console+0x140/0x1ec<br /> do_take_over_console from do_fbcon_takeover+0x70/0xd0<br /> do_fbcon_takeover from fbcon_fb_registered+0x19c/0x1ac<br /> fbcon_fb_registered from register_framebuffer+0x190/0x21c<br /> register_framebuffer from __drm_fb_helper_initial_config_and_unlock+0x350/0x574<br /> __drm_fb_helper_initial_config_and_unlock from exynos_drm_fbdev_client_hotplug+0x6c/0xb0<br /> exynos_drm_fbdev_client_hotplug from drm_client_register+0x58/0x94<br /> drm_client_register from exynos_drm_bind+0x160/0x190<br /> exynos_drm_bind from try_to_bring_up_aggregate_device+0x200/0x2d8<br /> try_to_bring_up_aggregate_device from __component_add+0xb0/0x170<br /> __component_add from mixer_probe+0x74/0xcc<br /> mixer_probe from platform_probe+0x5c/0xb8<br /> platform_probe from really_probe+0xe0/0x3d8<br /> really_probe from __driver_probe_device+0x9c/0x1e4<br /> __driver_probe_device from driver_probe_device+0x30/0xc0<br /> driver_probe_device from __device_attach_driver+0xa8/0x120<br /> __device_attach_driver from bus_for_each_drv+0x80/0xcc<br /> bus_for_each_drv from __device_attach+0xac/0x1fc<br /> __device_attach from bus_probe_device+0x8c/0x90<br /> bus_probe_device from deferred_probe_work_func+0<br /> ---truncated---