CVE-2024-35927

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-35927
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-35927.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-35927
Downstream
Related
Published
2024-05-19T10:10:37Z
Modified
2025-10-17T03:57:59.009460Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
drm: Check output polling initialized before disabling
Details

In the Linux kernel, the following vulnerability has been resolved:

drm: Check output polling initialized before disabling

In drmkmshelperpolldisable() check if output polling support is initialized before disabling polling. If not flag this as a warning. Additionally in drmmodeconfighelpersuspend() and drmmodeconfighelperresume() calls, that re the callers of these functions, avoid invoking them if polling is not initialized. For drivers like hyperv-drm, that do not initialize connector polling, if suspend is called without this check, it leads to suspend failure with following stack [ 770.719392] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 770.720592] printk: Suspending console(s) (use noconsolesuspend to debug) [ 770.948823] ------------[ cut here ]------------ [ 770.948824] WARNING: CPU: 1 PID: 17197 at kernel/workqueue.c:3162 flushwork.isra.0+0x212/0x230 [ 770.948831] Modules linked in: rfkill nftcounter xtconntrack xtowner udf nftcompat crcitut nftfibinet nftfibipv4 nftfibipv6 nftfib nftrejectinet nfrejectipv4 nfrejectipv6 nftreject nftct nftchainnat nfnat nfconntrack nfdefragipv6 nfdefragipv4 ipset nftables nfnetlink vfat fat mlx5ib ibuverbs ibcore mlx5core intelraplmsr intelraplcommon kvmamd ccp mlxfw kvm psample hypervdrm tls drmshmemhelper drmkmshelper irqbypass pcspkr syscopyarea sysfillrect sysimgblt hvballoon hvutils joydev drm fuse xfs libcrc32c pcihyperv pcihypervintf srmod sdmod cdrom t10pi sg hvstorvsc scsitransportfc hvnetvsc serioraw hypervkeyboard hidhyperv crct10difpclmul crc32pclmul crc32cintel hvvmbus ghashclmulniintel dmmirror dmregionhash dmlog dmmod [ 770.948863] CPU: 1 PID: 17197 Comm: systemd-sleep Not tainted 5.14.0-362.2.1.el93.x8664 #1 [ 770.948865] Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 [ 770.948866] RIP: 0010:flushwork.isra.0+0x212/0x230 [ 770.948869] Code: 8b 4d 00 4c 8b 45 08 89 ca 48 c1 e9 04 83 e2 08 83 e1 0f 83 ca 02 89 c8 48 0f ba 6d 00 03 e9 25 ff ff ff 0f 0b e9 4e ff ff ff <0f> 0b 45 31 ed e9 44 ff ff ff e8 8f 89 b2 00 66 66 2e 0f 1f 84 00 [ 770.948870] RSP: 0018:ffffaf4ac213fb10 EFLAGS: 00010246 [ 770.948871] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8c992857 [ 770.948872] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff9aad82b00330 [ 770.948873] RBP: ffff9aad82b00330 R08: 0000000000000000 R09: ffff9aad87ee3d10 [ 770.948874] R10: 0000000000000200 R11: 0000000000000000 R12: ffff9aad82b00330 [ 770.948874] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 770.948875] FS: 00007ff1b2f6bb40(0000) GS:ffff9aaf37d00000(0000) knlGS:0000000000000000 [ 770.948878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.948878] CR2: 0000555f345cb666 CR3: 00000001462dc005 CR4: 0000000000370ee0 [ 770.948879] Call Trace: [ 770.948880] <TASK> [ 770.948881] ? showtraceloglvl+0x1c4/0x2df [ 770.948884] ? showtraceloglvl+0x1c4/0x2df [ 770.948886] ? _cancelworktimer+0x103/0x190 [ 770.948887] ? _flushwork.isra.0+0x212/0x230 [ 770.948889] ? _warn+0x81/0x110 [ 770.948891] ? _flushwork.isra.0+0x212/0x230 [ 770.948892] ? reportbug+0x10a/0x140 [ 770.948895] ? handlebug+0x3c/0x70 [ 770.948898] ? excinvalidop+0x14/0x70 [ 770.948899] ? asmexcinvalidop+0x16/0x20 [ 770.948903] ? _flushwork.isra.0+0x212/0x230 [ 770.948905] _cancelworktimer+0x103/0x190 [ 770.948907] ? _rawspinunlockirqrestore+0xa/0x30 [ 770.948910] drmkmshelperpolldisable+0x1e/0x40 [drmkmshelper] [ 770.948923] drmmodeconfighelpersuspend+0x1c/0x80 [drmkmshelper] [ 770.948933] ? _pfxvmbussuspend+0x10/0x10 [hvvmbus] [ 770.948942] hypervvmbussuspend+0x17/0x40 [hypervdrm] [ 770.948944] ? _pfxvmbussuspend+0x10/0x10 [hvvmbus] [ 770.948951] dpmruncallback+0x4c/0x140 [ 770.948954] _devicesuspendnoir ---truncated---

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
78b991ccfa64a438e2d8c2997d22d55621ab277d
Fixed
3d1b47e3a935abd4f258a945db87e7267ff4079c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
78b991ccfa64a438e2d8c2997d22d55621ab277d
Fixed
18451798f4a4e7418b9fad7e7dd313fe84b1f545
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
78b991ccfa64a438e2d8c2997d22d55621ab277d
Fixed
5abffb66d12bcac84bf7b66389c571b8bb6e82bd

Affected versions

v6.*

v6.1
v6.1-rc7
v6.1-rc8
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.2
v6.8.3
v6.8.4
v6.8.5

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d1b47e3a935abd4f258a945db87e7267ff4079c",
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "169806852336577518417409581977534042550",
                "205041827586092264472533728252642841440",
                "154379989113506697276132598463235820384",
                "231515929586648240334850949849039420768",
                "100627648349740544564362023929928022503",
                "5830654170405081672123220746170145523",
                "222533170147521190027373000423819124066",
                "329915292726636639745431886194142086650",
                "185281861275554968268665008564203823149",
                "263290405943514154206184852858600452736",
                "215565879071164270047561027625431898631",
                "310337941610882769669566749951024797615"
            ]
        },
        "id": "CVE-2024-35927-1697adb2"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d1b47e3a935abd4f258a945db87e7267ff4079c",
        "signature_version": "v1",
        "target": {
            "function": "drm_kms_helper_poll_enable",
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "function_hash": "8987749316989448381215852757379997297",
            "length": 286.0
        },
        "id": "CVE-2024-35927-2e796cb6"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18451798f4a4e7418b9fad7e7dd313fe84b1f545",
        "signature_version": "v1",
        "target": {
            "function": "drm_mode_config_helper_suspend",
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "function_hash": "59308160751936433938374550331062413913",
            "length": 331.0
        },
        "id": "CVE-2024-35927-2ecf36cb"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d1b47e3a935abd4f258a945db87e7267ff4079c",
        "signature_version": "v1",
        "target": {
            "function": "drm_mode_config_helper_resume",
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "function_hash": "303309160364739110918964163786461196437",
            "length": 393.0
        },
        "id": "CVE-2024-35927-3117976b"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d1b47e3a935abd4f258a945db87e7267ff4079c",
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "178823455645423192220939447099012068562",
                "33265628056926712577792825198407827561",
                "65613366449673331622191078131961273485",
                "14491529248520414935163422774118261172",
                "231879732129532695914361823201315735522",
                "39219730769384660287498701316758200341",
                "169618764873465437857562390598908434489",
                "11936781823832236762700065718920475398",
                "248365209026798013972635840142130840106",
                "36360858638238005010370344949027731484",
                "121679457971331728642031530044496324347",
                "56842950998760199751686036797405293839",
                "337666490276870520306572603125451344285",
                "171688338290799884568284912733533560669"
            ]
        },
        "id": "CVE-2024-35927-41907679"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5abffb66d12bcac84bf7b66389c571b8bb6e82bd",
        "signature_version": "v1",
        "target": {
            "function": "drm_mode_config_helper_resume",
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "function_hash": "303309160364739110918964163786461196437",
            "length": 393.0
        },
        "id": "CVE-2024-35927-52d39566"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18451798f4a4e7418b9fad7e7dd313fe84b1f545",
        "signature_version": "v1",
        "target": {
            "function": "drm_mode_config_helper_resume",
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "function_hash": "303309160364739110918964163786461196437",
            "length": 393.0
        },
        "id": "CVE-2024-35927-72b8f21b"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5abffb66d12bcac84bf7b66389c571b8bb6e82bd",
        "signature_version": "v1",
        "target": {
            "function": "drm_mode_config_helper_suspend",
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "function_hash": "59308160751936433938374550331062413913",
            "length": 331.0
        },
        "id": "CVE-2024-35927-7c206a6a"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5abffb66d12bcac84bf7b66389c571b8bb6e82bd",
        "signature_version": "v1",
        "target": {
            "function": "drm_kms_helper_poll_disable",
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "function_hash": "66845904881542844766912660741559078248",
            "length": 203.0
        },
        "id": "CVE-2024-35927-7ecea3be"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18451798f4a4e7418b9fad7e7dd313fe84b1f545",
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "178823455645423192220939447099012068562",
                "33265628056926712577792825198407827561",
                "65613366449673331622191078131961273485",
                "14491529248520414935163422774118261172",
                "231879732129532695914361823201315735522",
                "39219730769384660287498701316758200341",
                "169618764873465437857562390598908434489",
                "11936781823832236762700065718920475398",
                "248365209026798013972635840142130840106",
                "36360858638238005010370344949027731484",
                "121679457971331728642031530044496324347",
                "56842950998760199751686036797405293839",
                "337666490276870520306572603125451344285",
                "171688338290799884568284912733533560669"
            ]
        },
        "id": "CVE-2024-35927-800d86dc"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d1b47e3a935abd4f258a945db87e7267ff4079c",
        "signature_version": "v1",
        "target": {
            "function": "drm_kms_helper_poll_disable",
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "function_hash": "66845904881542844766912660741559078248",
            "length": 203.0
        },
        "id": "CVE-2024-35927-802511ed"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18451798f4a4e7418b9fad7e7dd313fe84b1f545",
        "signature_version": "v1",
        "target": {
            "function": "drm_kms_helper_poll_disable",
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "function_hash": "66845904881542844766912660741559078248",
            "length": 203.0
        },
        "id": "CVE-2024-35927-80832854"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d1b47e3a935abd4f258a945db87e7267ff4079c",
        "signature_version": "v1",
        "target": {
            "function": "drm_mode_config_helper_suspend",
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "function_hash": "59308160751936433938374550331062413913",
            "length": 331.0
        },
        "id": "CVE-2024-35927-82bebe9b"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18451798f4a4e7418b9fad7e7dd313fe84b1f545",
        "signature_version": "v1",
        "target": {
            "function": "drm_kms_helper_poll_enable",
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "function_hash": "8987749316989448381215852757379997297",
            "length": 286.0
        },
        "id": "CVE-2024-35927-8f0b02f2"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5abffb66d12bcac84bf7b66389c571b8bb6e82bd",
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "169806852336577518417409581977534042550",
                "205041827586092264472533728252642841440",
                "154379989113506697276132598463235820384",
                "231515929586648240334850949849039420768",
                "100627648349740544564362023929928022503",
                "5830654170405081672123220746170145523",
                "222533170147521190027373000423819124066",
                "329915292726636639745431886194142086650",
                "185281861275554968268665008564203823149",
                "263290405943514154206184852858600452736",
                "215565879071164270047561027625431898631",
                "310337941610882769669566749951024797615"
            ]
        },
        "id": "CVE-2024-35927-c8cf4600"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5abffb66d12bcac84bf7b66389c571b8bb6e82bd",
        "signature_version": "v1",
        "target": {
            "function": "drm_kms_helper_poll_enable",
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "function_hash": "8987749316989448381215852757379997297",
            "length": 286.0
        },
        "id": "CVE-2024-35927-dd6dda28"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18451798f4a4e7418b9fad7e7dd313fe84b1f545",
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/drm_probe_helper.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "169806852336577518417409581977534042550",
                "205041827586092264472533728252642841440",
                "154379989113506697276132598463235820384",
                "231515929586648240334850949849039420768",
                "100627648349740544564362023929928022503",
                "5830654170405081672123220746170145523",
                "222533170147521190027373000423819124066",
                "329915292726636639745431886194142086650",
                "185281861275554968268665008564203823149",
                "263290405943514154206184852858600452736",
                "215565879071164270047561027625431898631",
                "310337941610882769669566749951024797615"
            ]
        },
        "id": "CVE-2024-35927-e78d5378"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5abffb66d12bcac84bf7b66389c571b8bb6e82bd",
        "signature_version": "v1",
        "target": {
            "file": "drivers/gpu/drm/drm_modeset_helper.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "178823455645423192220939447099012068562",
                "33265628056926712577792825198407827561",
                "65613366449673331622191078131961273485",
                "14491529248520414935163422774118261172",
                "231879732129532695914361823201315735522",
                "39219730769384660287498701316758200341",
                "169618764873465437857562390598908434489",
                "11936781823832236762700065718920475398",
                "248365209026798013972635840142130840106",
                "36360858638238005010370344949027731484",
                "121679457971331728642031530044496324347",
                "56842950998760199751686036797405293839",
                "337666490276870520306572603125451344285",
                "171688338290799884568284912733533560669"
            ]
        },
        "id": "CVE-2024-35927-f71f00b5"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.6.27
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.6