CVE-2024-50213
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/11/2024
Last modified:
01/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic()<br />
<br />
modprobe drm_hdmi_state_helper_test and then rmmod it, the following<br />
memory leak occurs.<br />
<br />
The `mode` allocated in drm_mode_duplicate() called by<br />
drm_display_mode_from_cea_vic() is not freed, which cause the memory leak:<br />
<br />
unreferenced object 0xffffff80ccd18100 (size 128):<br />
comm "kunit_try_catch", pid 1851, jiffies 4295059695<br />
hex dump (first 32 bytes):<br />
57 62 00 00 80 02 90 02 f0 02 20 03 00 00 e0 01 Wb........ .....<br />
ea 01 ec 01 0d 02 00 00 0a 00 00 00 00 00 00 00 ................<br />
backtrace (crc c2f1aa95):<br />
[] kmemleak_alloc+0x34/0x40<br />
[] __kmalloc_cache_noprof+0x26c/0x2f4<br />
[] drm_mode_duplicate+0x44/0x19c<br />
[] drm_display_mode_from_cea_vic+0x88/0x98<br />
[] 0xffffffedc11ae69c<br />
[] kunit_try_run_case+0x13c/0x3ac<br />
[] kunit_generic_run_threadfn_adapter+0x80/0xec<br />
[] kthread+0x2e8/0x374<br />
[] ret_from_fork+0x10/0x20<br />
......<br />
<br />
Free `mode` by using drm_kunit_display_mode_from_cea_vic()<br />
to fix it.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11 (including) | 6.11.7 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



