CVE-2024-35952

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35952
In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in ast_dp_set_on_off() that could lead to infinite-loop. This is because the register, VGACRI-Dx, checked in this API is a scratch register actually controlled by a MCU, named DPMCU, in BMC. These scratch registers are protected by scu-lock. If suc-lock is not off, DPMCU can not update these registers and then host will have soft lockup due to never updated status. DPMCU is used to control DP and relative registers to handshake with host's VGA driver. Even the most time-consuming task, DP's link training, is less than 100ms. 200ms should be enough.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/35768baf0fdfc47ede42d899506bad78450e9294 Patch
https://git.kernel.org/stable/c/8a6fea3fcb577a543ef67683ca7105bde49a38fb Patch
https://git.kernel.org/stable/c/a81b2acd43e24e419f65df97348c76a5a1496066 Patch
https://git.kernel.org/stable/c/bc004f5038220b1891ef4107134ccae44be55109 Patch
https://git.kernel.org/stable/c/35768baf0fdfc47ede42d899506bad78450e9294 Patch
https://git.kernel.org/stable/c/8a6fea3fcb577a543ef67683ca7105bde49a38fb Patch
https://git.kernel.org/stable/c/a81b2acd43e24e419f65df97348c76a5a1496066 Patch
https://git.kernel.org/stable/c/bc004f5038220b1891ef4107134ccae44be55109 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
History

23 Sep 2025, 16:44

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/35768baf0fdfc47ede42d899506bad78450e9294 - () https://git.kernel.org/stable/c/35768baf0fdfc47ede42d899506bad78450e9294 - Patch
References () https://git.kernel.org/stable/c/8a6fea3fcb577a543ef67683ca7105bde49a38fb - () https://git.kernel.org/stable/c/8a6fea3fcb577a543ef67683ca7105bde49a38fb - Patch
References () https://git.kernel.org/stable/c/a81b2acd43e24e419f65df97348c76a5a1496066 - () https://git.kernel.org/stable/c/a81b2acd43e24e419f65df97348c76a5a1496066 - Patch
References () https://git.kernel.org/stable/c/bc004f5038220b1891ef4107134ccae44be55109 - () https://git.kernel.org/stable/c/bc004f5038220b1891ef4107134ccae44be55109 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-667

21 Nov 2024, 09:21

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/ast: corrige el bloqueo suave. Hay un bucle while en ast_dp_set_on_off() que podría generar un bucle infinito. Esto se debe a que el registro, VGACRI-Dx, marcado en esta API es un registro temporal en realidad controlado por una MCU, denominada DPMCU, en BMC. Estos registros de scratch están protegidos por scu-lock. Si suc-lock no está desactivado, DPMCU no puede actualizar estos registros y luego el host tendrá un bloqueo suave debido a que el estado nunca se actualizó. DPMCU se utiliza para controlar DP y los registros relativos al protocolo de enlace con el controlador VGA del host. Incluso la tarea que consume más tiempo, el entrenamiento de enlaces de DP, dura menos de 100 ms. 200 ms deberían ser suficientes.
References () https://git.kernel.org/stable/c/35768baf0fdfc47ede42d899506bad78450e9294 - () https://git.kernel.org/stable/c/35768baf0fdfc47ede42d899506bad78450e9294 -
References () https://git.kernel.org/stable/c/8a6fea3fcb577a543ef67683ca7105bde49a38fb - () https://git.kernel.org/stable/c/8a6fea3fcb577a543ef67683ca7105bde49a38fb -
References () https://git.kernel.org/stable/c/a81b2acd43e24e419f65df97348c76a5a1496066 - () https://git.kernel.org/stable/c/a81b2acd43e24e419f65df97348c76a5a1496066 -
References () https://git.kernel.org/stable/c/bc004f5038220b1891ef4107134ccae44be55109 - () https://git.kernel.org/stable/c/bc004f5038220b1891ef4107134ccae44be55109 -

20 May 2024, 13:00

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 10:15

Updated : 2025-09-23 16:44

NVD link : CVE-2024-35952

Mitre link : CVE-2024-35952

CVE.ORG link : CVE-2024-35952

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking