CVE-2024-35920— media: mediatek: vcodec: adding lock to protect decoder context list
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-35920
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
media: mediatek: vcodec: adding lock to protect decoder context list
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: adding lock to protect decoder context list Add a lock for the ctx_list, to avoid accessing a NULL pointer within the 'vpu_dec_ipi_handler' function when the ctx_list has been deleted due to an unexpected behavior on the SCP IP block. Hardware name: Google juniper sku16 board (DT) pstate: 20400005 (nzCv daif +PAN -UAO -TCO BTYPE=--) pc : vpu_dec_ipi_handler+0x58/0x1f8 [mtk_vcodec_dec] lr : scp_ipi_handler+0xd0/0x194 [mtk_scp] sp : ffffffc0131dbbd0 x29: ffffffc0131dbbd0 x28: 0000000000000000 x27: ffffff9bb277f348 x26: ffffff9bb242ad00 x25: ffffffd2d440d3b8 x24: ffffffd2a13ff1d4 x23: ffffff9bb7fe85a0 x22: ffffffc0133fbdb0 x21: 0000000000000010 x20: ffffff9b050ea328 x19: ffffffc0131dbc08 x18: 0000000000001000 x17: 0000000000000000 x16: ffffffd2d461c6e0 x15: 0000000000000242 x14: 000000000000018f x13: 000000000000004d x12: 0000000000000000 x11: 0000000000000001 x10: fffffffffffffff0 x9 : ffffff9bb6e793a8 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : fffffffffffffff0 x3 : 0000000000000020 x2 : ffffff9bb6e79080 x1 : 0000000000000010 x0 : ffffffc0131dbc08 Call trace: vpu_dec_ipi_handler+0x58/0x1f8 [mtk_vcodec_dec (HASH:6c3f 2)] scp_ipi_handler+0xd0/0x194 [mtk_scp (HASH:7046 3)] mt8183_scp_irq_handler+0x44/0x88 [mtk_scp (HASH:7046 3)] scp_irq_handler+0x48/0x90 [mtk_scp (HASH:7046 3)] irq_thread_fn+0x38/0x94 irq_thread+0x100/0x1c0 kthread+0x140/0x1fc ret_from_fork+0x10/0x30 Code: 54000088 f94ca50a eb14015f 54000060 (f9400108) ---[ end trace ace43ce36cbd5c93 ]--- Kernel panic - not syncing: Oops: Fatal exception SMP: stopping secondary CPUs Kernel Offset: 0x12c4000000 from 0xffffffc010000000 PHYS_OFFSET: 0xffffffe580000000 CPU features: 0x08240002,2188200c Memory Limit: none
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 在某些情况下可能访问到空指针。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-35920
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-35920
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-05-19 · 82 CVEs total
| CVE-2024-35914 | nfsd: Fix error cleanup path in nfsd_rename() | |
| CVE-2024-35926 | crypto: iaa - Fix async_disable descriptor leak | |
| CVE-2024-35911 | ice: fix memory corruption bug with suspend and rebuild | |
| CVE-2024-35912 | wifi: iwlwifi: mvm: rfi: fix potential response leaks | |
| CVE-2024-35910 | tcp: properly terminate timers for kernel sockets | |
| CVE-2024-35907 | mlxbf_gige: call request_irq() after NAPI initialized | |
| CVE-2024-35905 | bpf: Protect against int overflow for stack access size | |
| CVE-2024-35904 | selinux: avoid dereference of garbage after mount failure | |
| CVE-2024-35903 | x86/bpf: Fix IP after emitting call depth accounting | |
| CVE-2024-35908 | tls: get psock ref after taking rxlock to avoid leak | |
| CVE-2024-35913 | wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF | |
| CVE-2024-35915 | nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet | |
| CVE-2024-35916 | dma-buf: Fix NULL pointer dereference in sanitycheck() | |
| CVE-2024-35917 | s390/bpf: Fix bpf_plt pointer arithmetic | |
| CVE-2023-52699 | sysv: don't call sb_bread() with pointers_lock held | |
| CVE-2024-35919 | media: mediatek: vcodec: adding lock to protect encoder context list | |
| CVE-2024-35921 | media: mediatek: vcodec: Fix oops when HEVC init fails | |
| CVE-2024-35922 | fbmon: prevent division by zero in fb_videomode_from_videomode() | |
| CVE-2024-35924 | usb: typec: ucsi: Limit read size on v1.2 | |
| CVE-2024-35925 | block: prevent division by zero in blk_rq_stat_sum() |
Showing top 20 of 82 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-35920
No comments yet