What’s Vulnerable › Vulnerabilities

CVE-2024-35919: media: mediatek: vcodec: adding lock to protect encoder context list

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-19 · updated 2026-08-04
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: adding lock to protect encoder context list Add a lock for the ctx_list, to avoid accessing a NULL pointer within the 'vpu_enc_ipi_handler' function when the ctx_list has been deleted due to an unexpected behavior on the SCP IP block.

Affected products

• Linux kernel: from 6.6 before 6.6.27; from 6.7 before 6.8.6; 6.9-rc1, 6.9-rc2, 6.9-rc3 — fixed in 6.6.27, 6.8.6

How to fix

Upgrade to a fixed version: Linux kernel 6.6.27, 6.8.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/41671f0c0182b2bae74ca7e3b0f155559e3e2fc5
• https://git.kernel.org/stable/c/51c84a8aac6e3b59af2b0e92ba63cabe2e641a2d
• https://git.kernel.org/stable/c/afaaf3a0f647a24a7bf6a2145d8ade37baaf75ad
• https://git.kernel.org/stable/c/41671f0c0182b2bae74ca7e3b0f155559e3e2fc5
• https://git.kernel.org/stable/c/51c84a8aac6e3b59af2b0e92ba63cabe2e641a2d
• https://git.kernel.org/stable/c/afaaf3a0f647a24a7bf6a2145d8ade37baaf75ad

Get alerted when CVE-2024-35919 or the next vulnerability affects your stack