Use-After-Free Vulnerability in Linux Kernel's Mediatek DRM Module

CVE-2024-57926

Summary

A vulnerability exists in the MediaTek DRM module of the Linux kernel, which can lead to a use-after-free condition. This issue arises when the mtk_drm_bind function allocates resources but fails to properly nullify pointers upon error, leading to potential access to previously freed memory. As a result, this can manifest in system instability during shutdown processes, causing crashes and undesired behavior in kernel operations. Addressing this vulnerability requires immediate attention to ensure safe memory management and prevent exploitation.

References