CVE-2024-44967 (GCVE-0-2024-44967)

Vulnerability from cvelistv5 – Published: 2024-09-04 18:56 – Updated: 2026-08-05 11:37
VLAI
Title
drm/mgag200: Bind I2C lifetime to DRM device
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devm_add_action_or_reset() will release the I2C adapter when the underlying Linux device goes away. But the connector still refers to it, so this cleanup leaves behind a stale pointer in struct drm_connector.ddc. Bind the lifetime of the I2C adapter to the connector's lifetime by using DRM's managed release. When the DRM device goes away (after the Linux device) DRM will first clean up the connector and then clean up the I2C adapter.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: b279df242972ae816a75cf1cc732af836f999100 , < 55a6916db77102765b22855d3a0add4751988b7c (git)
Affected: b279df242972ae816a75cf1cc732af836f999100 , < 81d34df843620e902dd04aa9205c875833d61c17 (git)
Affected: b279df242972ae816a75cf1cc732af836f999100 , < 9d96b91e03cba9dfcb4ac370c93af4dbc47d5191 (git)
Affected: b279df242972ae816a75cf1cc732af836f999100 , < eb1ae34e48a09b7a1179c579aed042b032e408f4 (git)
Create a notification for this product.
Linux Linux Affected: 6.0
Unaffected: 0 , < 6.0 (semver)
Unaffected: 6.1.105 , ≤ 6.1.* (semver)
Unaffected: 6.6.46 , ≤ 6.6.* (semver)
Unaffected: 6.10.5 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-44967",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:39:27.630336Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:35.025Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:14:15.199Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/mgag200/mgag200_i2c.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "55a6916db77102765b22855d3a0add4751988b7c",
              "status": "affected",
              "version": "b279df242972ae816a75cf1cc732af836f999100",
              "versionType": "git"
            },
            {
              "lessThan": "81d34df843620e902dd04aa9205c875833d61c17",
              "status": "affected",
              "version": "b279df242972ae816a75cf1cc732af836f999100",
              "versionType": "git"
            },
            {
              "lessThan": "9d96b91e03cba9dfcb4ac370c93af4dbc47d5191",
              "status": "affected",
              "version": "b279df242972ae816a75cf1cc732af836f999100",
              "versionType": "git"
            },
            {
              "lessThan": "eb1ae34e48a09b7a1179c579aed042b032e408f4",
              "status": "affected",
              "version": "b279df242972ae816a75cf1cc732af836f999100",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/mgag200/mgag200_i2c.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "lessThan": "6.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.105",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.105",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.46",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.5",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mgag200: Bind I2C lifetime to DRM device\n\nManaged cleanup with devm_add_action_or_reset() will release the I2C\nadapter when the underlying Linux device goes away. But the connector\nstill refers to it, so this cleanup leaves behind a stale pointer\nin struct drm_connector.ddc.\n\nBind the lifetime of the I2C adapter to the connector\u0027s lifetime by\nusing DRM\u0027s managed release. When the DRM device goes away (after\nthe Linux device) DRM will first clean up the connector and then\nclean up the I2C adapter."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires a local process holding an open `/dev/dri/cardN` file descriptor and issuing `DRM_IOCTL_MODE_GETCONNECTOR` after the mgag200 PCI device is unbound; there is no network- or adjacent-reachable path into the DRM connector probe.\nAC:L - The sequence is fully deterministic \u2014 hold the DRM fd open, let the driver unbind (devres always runs `i2c_del_adapter()` and `iounmap()` before the DRM device is released), then issue the ioctl; no race must be won and no uncontrollable memory layout is required to reach the stale `connector-\u003eddc`.\nPR:L - The attacker only needs an unprivileged local session with access to the DRM card node (console user, `video` group, or logind ACL) to hold the fd and issue the ioctl; because `.remove` uses `drm_dev_unregister()` rather than `drm_dev_unplug()`, ioctls on the existing fd are not gated after teardown.\nUI:N - No victim action is needed \u2014 the attacker\u0027s own ioctl on its own file descriptor performs the dereference, and an administrator capable of unbinding the driver can drive the entire chain without any second party.\nS:U - The stale pointer, the dead I2C adapter, and the unmapped MMIO window are all kernel-internal resources under the same security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Use of the released adapter dereferences a freed kobject name string (`dev_dbg`/`dev_err` on the unregistered `adap-\u003edev`), and `RREG8()` through the iounmap\u0027d `mdev-\u003ermmio` reads from a vmalloc/ioremap VA range that may already be recycled by another mapping, disclosing kernel or foreign device state.\nI:H - The `bit_xfer` callbacks perform `WREG8()`/`iowrite8()` writes through the stale, potentially reallocated ioremap virtual address, and write into the torn-down `i2c_adapter`/`rt_mutex` state \u2014 an uncontrolled kernel write primitive consistent with High integrity impact for a use-after-free.\nA:H - The most likely outcome is an immediate kernel page fault/oops when the I2C bit-banging touches the unmapped register window, killing the server\u0027s primary console display driver and taking down the task in kernel context."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:37:21.298Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/55a6916db77102765b22855d3a0add4751988b7c"
        },
        {
          "url": "https://git.kernel.org/stable/c/81d34df843620e902dd04aa9205c875833d61c17"
        },
        {
          "url": "https://git.kernel.org/stable/c/9d96b91e03cba9dfcb4ac370c93af4dbc47d5191"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb1ae34e48a09b7a1179c579aed042b032e408f4"
        }
      ],
      "title": "drm/mgag200: Bind I2C lifetime to DRM device",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-44967",
    "datePublished": "2024-09-04T18:56:44.814Z",
    "dateReserved": "2024-08-21T05:34:56.667Z",
    "dateUpdated": "2026-08-05T11:37:21.298Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-44967",
      "date": "2026-08-08",
      "epss": "0.00218",
      "percentile": "0.12267"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-44967\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-09-04T19:15:31.117\",\"lastModified\":\"2026-06-17T07:53:19.547\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/mgag200: Bind I2C lifetime to DRM device\\n\\nManaged cleanup with devm_add_action_or_reset() will release the I2C\\nadapter when the underlying Linux device goes away. But the connector\\nstill refers to it, so this cleanup leaves behind a stale pointer\\nin struct drm_connector.ddc.\\n\\nBind the lifetime of the I2C adapter to the connector\u0027s lifetime by\\nusing DRM\u0027s managed release. When the DRM device goes away (after\\nthe Linux device) DRM will first clean up the connector and then\\nclean up the I2C adapter.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/mgag200: vincular la vida \u00fatil de I2C al dispositivo DRM La limpieza administrada con devm_add_action_or_reset() liberar\u00e1 el adaptador I2C cuando el dispositivo Linux subyacente desaparezca. Pero el conector a\u00fan hace referencia a \u00e9l, por lo que esta limpieza deja un puntero obsoleto en struct drm_connector.ddc. Vincule la vida \u00fatil del adaptador I2C a la vida \u00fatil del conector mediante la liberaci\u00f3n administrada de DRM. Cuando el dispositivo DRM desaparezca (despu\u00e9s del dispositivo Linux), DRM primero limpiar\u00e1 el conector y luego limpiar\u00e1 el adaptador I2C.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpu/drm/mgag200/mgag200_i2c.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"b279df242972ae816a75cf1cc732af836f999100\",\"lessThan\":\"55a6916db77102765b22855d3a0add4751988b7c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b279df242972ae816a75cf1cc732af836f999100\",\"lessThan\":\"81d34df843620e902dd04aa9205c875833d61c17\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b279df242972ae816a75cf1cc732af836f999100\",\"lessThan\":\"9d96b91e03cba9dfcb4ac370c93af4dbc47d5191\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b279df242972ae816a75cf1cc732af836f999100\",\"lessThan\":\"eb1ae34e48a09b7a1179c579aed042b032e408f4\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpu/drm/mgag200/mgag200_i2c.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.0\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.105\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.46\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.5\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T17:39:27.630336Z\",\"id\":\"CVE-2024-44967\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0\",\"versionEndExcluding\":\"6.1.105\",\"matchCriteriaId\":\"C8F45861-5392-4CE3-B2F3-CAAF81C93350\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.46\",\"matchCriteriaId\":\"FA11941E-81FB-484C-B583-881EEB488340\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.5\",\"matchCriteriaId\":\"D074AE50-4A5E-499C-A2FD-75FD60DEA560\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/55a6916db77102765b22855d3a0add4751988b7c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/81d34df843620e902dd04aa9205c875833d61c17\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9d96b91e03cba9dfcb4ac370c93af4dbc47d5191\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/eb1ae34e48a09b7a1179c579aed042b032e408f4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T18:08:30+00:00",
      "cve": "CVE-2024-44967",
      "id": "CVE-2024-44967",
      "initial_release_date": "2024-09-04T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/mgag200: Bind I2C lifetime to DRM device",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-44967.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:14:15.199Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-44967\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T17:39:27.630336Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:27.508Z\"}}], \"cna\": {\"title\": \"drm/mgag200: Bind I2C lifetime to DRM device\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"b279df242972ae816a75cf1cc732af836f999100\", \"lessThan\": \"55a6916db77102765b22855d3a0add4751988b7c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b279df242972ae816a75cf1cc732af836f999100\", \"lessThan\": \"81d34df843620e902dd04aa9205c875833d61c17\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b279df242972ae816a75cf1cc732af836f999100\", \"lessThan\": \"9d96b91e03cba9dfcb4ac370c93af4dbc47d5191\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b279df242972ae816a75cf1cc732af836f999100\", \"lessThan\": \"eb1ae34e48a09b7a1179c579aed042b032e408f4\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/gpu/drm/mgag200/mgag200_i2c.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.0\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.105\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.46\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/gpu/drm/mgag200/mgag200_i2c.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/55a6916db77102765b22855d3a0add4751988b7c\"}, {\"url\": \"https://git.kernel.org/stable/c/81d34df843620e902dd04aa9205c875833d61c17\"}, {\"url\": \"https://git.kernel.org/stable/c/9d96b91e03cba9dfcb4ac370c93af4dbc47d5191\"}, {\"url\": \"https://git.kernel.org/stable/c/eb1ae34e48a09b7a1179c579aed042b032e408f4\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/mgag200: Bind I2C lifetime to DRM device\\n\\nManaged cleanup with devm_add_action_or_reset() will release the I2C\\nadapter when the underlying Linux device goes away. But the connector\\nstill refers to it, so this cleanup leaves behind a stale pointer\\nin struct drm_connector.ddc.\\n\\nBind the lifetime of the I2C adapter to the connector\u0027s lifetime by\\nusing DRM\u0027s managed release. When the DRM device goes away (after\\nthe Linux device) DRM will first clean up the connector and then\\nclean up the I2C adapter.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.105\", \"versionStartIncluding\": \"6.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.46\", \"versionStartIncluding\": \"6.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.5\", \"versionStartIncluding\": \"6.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"6.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-04T09:30:29.493Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-44967\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-04T09:30:29.493Z\", \"dateReserved\": \"2024-08-21T05:34:56.667Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-09-04T18:56:44.814Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.