CVE-2024-58074: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-58074 is a vulnerability in the Linux kernel's DRM (Direct Rendering Manager) subsystem, specifically affecting the Intel i915 graphics driver. The issue was discovered and disclosed on March 6, 2025, and involves a potential NULL pointer dereference in the intelsanitizeencoder() function. The vulnerability affects systems running the Linux kernel with Intel graphics hardware (NVD, RedHat).

The vulnerability stems from an incorrect handling of the inteldisplay pointer in the encoder hooks. The issue occurs when the intelsanitizeencoder() function passes NULL as the 'state' argument to encoder .disable() and .postdisable() functions. The CVSS v3.1 score for this vulnerability is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), indicating moderate severity with local access required (RedHat).

The vulnerability can lead to potential system crashes (oops) in the Linux kernel when using Intel graphics hardware. The impact is limited to availability issues, with no direct impact on confidentiality or integrity of the system (RedHat).

A fix has been implemented that modifies the code to grab the intel_display pointer from the 'encoder' rather than the 'state' parameter in the encoder hooks. The patch has been committed to the Linux kernel repository and is identified by commit 1885401569f24eb35c631bcc4e6543360dbe9292 (Kernel Commit).