What’s Vulnerable › Vulnerabilities

CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-30 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety error detector (KASAN) catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain features which are not initialized. [HOW] Skip them when connector type is DRM_MODE_CONNECTOR_WRITEBACK.

Affected products

• Linux kernel: from 4.15 before 6.1.116; from 6.2 before 6.6.31; from 6.7 before 6.8.10; 6.9-rc1, 6.9-rc2, 6.9-rc3 — fixed in 6.1.116, 6.6.31, 6.8.10

How to fix

Upgrade to a fixed version: Linux kernel 6.1.116, 6.6.31, 6.8.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/87de0a741ef6d93fcb99983138a0d89a546a043c
• https://git.kernel.org/stable/c/951a498fa993c5501994ec2df97c9297b02488c7
• https://git.kernel.org/stable/c/e9baa7110e9f3756bd5a812af376c288d9be894d
• https://git.kernel.org/stable/c/ecedd99a9369fb5cde601ae9abd58bca2739f1ae
• https://git.kernel.org/stable/c/951a498fa993c5501994ec2df97c9297b02488c7
• https://git.kernel.org/stable/c/e9baa7110e9f3756bd5a812af376c288d9be894d
• https://git.kernel.org/stable/c/ecedd99a9369fb5cde601ae9abd58bca2739f1ae
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Get alerted when CVE-2024-36914 or the next vulnerability affects your stack