drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• linux linux kernel4.19 and later · before 4.19.247
• linux linux kernel4.20 and later · before 5.4.198
• linux linux kernel5.5 and later · before 5.10.121
• linux linux kernel5.11 and later · before 5.15.46
• linux linux kernel5.16 and later · before 5.17.14
• linux linux kernel5.18 and later · before 5.18.3

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 4.19affected
  • 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef and later · before aa4cb188988dc6f1b3f4917d4dbc452150a5d871affected · git
  • 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef and later · before ef10d0c68e8608848cd58fca2589685718426607affected · git
  • 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef and later · before 134760263f6441741db0b2970e7face6b34b6d1caffected · git
  • 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef and later · before ef4bdaac7cb5416f236613ed9337ff0ea8ee329baffected · git
  • 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef and later · before 97ac682b6f7d36be5d934f86c9911066540a68f1affected · git
  • 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef and later · before 5b0adf5cbf3b74721e4e4c4e0cadc91b8df8bcc2affected · git
  • 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef and later · before fa5186b279ecf44b14fb435540d2065be91cb1edaffected · git
  • before 4.19not affected · semver
  • 4.19.247 and later · up to and including 4.19.*not affected · semver

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now
• CVE-2016-5195Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect haKEV
  83Now
• CVE-2019-13272In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to creKEV
  77This week
• CVE-2013-6282The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addKEV
  77This week
• CVE-2013-2094The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows loKEV
  77This week

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.