What’s Vulnerable › Vulnerabilities

CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential oopsies

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-06 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Grab intel_display from the encoder to avoid potential oopsies Grab the intel_display from 'encoder' rather than 'state' in the encoder hooks to avoid the massive footgun that is intel_sanitize_encoder(), which passes NULL as the 'state' argument to encoder .disable() and .post_disable(). TODO: figure out how to actually fix intel_sanitize_encoder()...

Affected products

• Linux kernel: from 6.12 before 6.13.2 — fixed in 6.13.2

How to fix

Upgrade to a fixed version: Linux kernel 6.13.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1885401569f24eb35c631bcc4e6543360dbe9292
• https://git.kernel.org/stable/c/3a03ef592ef9b900698b46703015f9134721479c
• https://git.kernel.org/stable/c/dc3806d9eb66d0105f8d55d462d4ef681d9eac59

Get alerted when CVE-2024-58074 or the next vulnerability affects your stack