Linux Kernel Vulnerability in Rockchip's Samsung HDPTX Implementation

CVE-2024-57799

Summary

A vulnerability exists within the Linux kernel related to Rockchip's Samsung HDPTX implementation. Specifically, during the probe process, the function rk_hdptx_phy_runtime_resume() may be invoked before platform_set_drvdata() has been executed. This sequence can lead to a NULL pointer dereference when the return value from dev_get_drvdata() is accessed, resulting in potential system instability. Developers are advised to ensure platform_set_drvdata() is called before devm_pm_runtime_enable() to mitigate this issue effectively.

References