CVE-2024-35919

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-35919
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-35919.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-35919
Downstream
Published
2024-05-19T10:10:31.707Z
Modified
2025-11-28T02:34:25.399922Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
media: mediatek: vcodec: adding lock to protect encoder context list
Details

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: adding lock to protect encoder context list

Add a lock for the ctxlist, to avoid accessing a NULL pointer within the 'vpuencipihandler' function when the ctx_list has been deleted due to an unexpected behavior on the SCP IP block.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35919.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1972e32431ed14682909ad568c6fd660572ae6ab
Fixed
41671f0c0182b2bae74ca7e3b0f155559e3e2fc5
Fixed
51c84a8aac6e3b59af2b0e92ba63cabe2e641a2d
Fixed
afaaf3a0f647a24a7bf6a2145d8ade37baaf75ad

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.27
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.6