CVE-2024-38592

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Init `ddp_comp` with devm_kcalloc() In the case where `conn_routes` is true we allocate an extra slot in the `ddp_comp` array but mtk_drm_crtc_create() never seemed to initialize it in the test case I ran. For me, this caused a later crash when we looped through the array in mtk_drm_crtc_mode_valid(). This showed up for me when I booted with `slub_debug=FZPUA` which poisons the memory initially. Without `slub_debug` I couldn't reproduce, presumably because the later code handles the value being NULL and in most cases (not guaranteed in all cases) the memory the allocator returned started out as 0. It really doesn't hurt to initialize the array with devm_kcalloc() since the array is small and the overhead of initting a handful of elements to 0 is small. In general initting memory to zero is a safer practice and usually it's suggested to only use the non-initting alloc functions if you really need to. Let's switch the function to use an allocation function that zeros the memory. For me, this avoids the crash.

• CWE-908

• https://git.kernel.org/stable/c/01a2c5123e27b3c4685bf2fc4c2e879f6e0c7b33Patch
• https://git.kernel.org/stable/c/9fe2cc3fa44f7ad7ba5f29c1a68b2b924c17b9b1Patch
• https://git.kernel.org/stable/c/cf69d0af7db917b82aceaa44b7b1b9376609da22Patch
• https://git.kernel.org/stable/c/01a2c5123e27b3c4685bf2fc4c2e879f6e0c7b33Patch
• https://git.kernel.org/stable/c/9fe2cc3fa44f7ad7ba5f29c1a68b2b924c17b9b1Patch
• https://git.kernel.org/stable/c/cf69d0af7db917b82aceaa44b7b1b9376609da22Patch

Published

Jun 19, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38587In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38588In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38589In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-3859On 32-bit versions there were integer-overflows that led to …5.9
• CVE-2024-38590In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38591In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38593In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38594In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38595In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38596In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-38597In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38598In the Linux kernel, the following vulnerability has been re…5.5