CVE-2024-26874: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26874 is a NULL pointer dereference vulnerability discovered in the Linux kernel's MediaTek DRM (Direct Rendering Manager) driver. The issue was identified in the mtk_drm_crtc_finish_page_flip() function and affects Linux kernel versions from 5.11 through 6.7.11 (NVD).

The vulnerability stems from a race condition where mtk_crtc->event can be NULL in mtk_drm_crtc_finish_page_flip(). The pending_needs_vblank value is set based on mtk_crtc->event, but in mtk_drm_crtc_atomic_flush(), it's not protected by the same lock used in mtk_drm_finish_page_flip(). This can lead to a NULL pointer dereference. The CVSS v3.1 base score is 4.7 (Medium) with vector: AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H (Kernel Patch).

The vulnerability can result in a denial of service condition through a system crash when the NULL pointer dereference is triggered (NVD).

The vulnerability requires local access and high attack complexity to exploit. An attacker needs local user privileges to trigger the race condition (NVD).

The issue has been fixed in Linux kernel version 6.8.0-35.35 and backported to various stable kernel versions. The fix involves adding a NULL check before accessing mtk_crtc->event in the mtk_drm_crtc_finish_page_flip() function (Kernel Patch).