CVE-2024-36014: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-36014 is a vulnerability in the Linux kernel's ARM Mali Display Processor (malidp) driver, discovered and disclosed on May 29, 2024. The vulnerability affects Linux kernel versions from 4.19 up to versions before 6.8.0-40.40. The issue occurs in the malidp_mw_connector_reset function where memory is allocated with kzalloc without proper null pointer checking (NVD).

The vulnerability is a NULL Pointer Dereference (CWE-476) in the drm/arm/malidp driver. In the malidp_mw_connector_reset function, new memory is allocated with kzalloc, but no check is performed before calling __drm_atomic_helper_connector_reset. The issue has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability could lead to a system crash due to null pointer dereferencing in the Mali display processor driver. This affects system availability but does not compromise confidentiality or integrity of the system (NVD).

The vulnerability requires local access with low privileges and no user interaction. The attack complexity is low, making it relatively straightforward to exploit if an attacker has local access to the system (NVD).

The vulnerability has been fixed in multiple Linux kernel versions. The fix involves adding a null pointer check before calling __drm_atomic_helper_connector_reset. Updates are available in kernel version 6.8.0-40.40 and backported to various stable kernel branches. Users should update their systems to the patched versions (Kernel Patch).