CVE-2024-58074: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-58074 is a vulnerability in the Linux kernel's DRM (Direct Rendering Manager) subsystem, specifically affecting the Intel i915 graphics driver. The issue was discovered and disclosed on March 6, 2025, and involves a potential NULL pointer dereference in the intel_sanitize_encoder() function. The vulnerability affects systems running the Linux kernel with Intel graphics hardware (NVD, RedHat).

The vulnerability stems from an incorrect handling of the intel_display pointer in the encoder hooks. The issue occurs when the intel_sanitize_encoder() function passes NULL as the 'state' argument to encoder .disable() and .post_disable() functions. The CVSS v3.1 score for this vulnerability is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), indicating moderate severity with local access required (RedHat).

The vulnerability can lead to potential system crashes (oops) in the Linux kernel when using Intel graphics hardware. The impact is limited to availability issues, with no direct impact on confidentiality or integrity of the system (RedHat).

The vulnerability requires local access to the system and can be triggered through the Intel graphics driver interface. No known exploits in the wild have been reported at the time of disclosure (RedHat).

A fix has been implemented that modifies the code to grab the intel_display pointer from the 'encoder' rather than the 'state' parameter in the encoder hooks. The patch has been committed to the Linux kernel repository and is identified by commit 1885401569f24eb35c631bcc4e6543360dbe9292 (Kernel Commit).