{"id":"CVE-2024-26876","title":"drm/bridge: adv7511: fix crash on irq during probe","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: adv7511: fix crash on irq during probe\n\nMoved IRQ registration down to end of adv7511_probe().\n\nIf an IRQ already is pending during adv7511_probe\n(before ad…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 67b92950912195b9c83e3d652d7eb3551741d850","Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 50f4b57e9a9db4ede9294f39b9e75b5f26bae9b7","Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 955c1252930677762e0db2b6b9e36938c887445c","Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 28a94271bd50e4cf498df0381f776f8ea40a289e","Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < aeedaee5ef5468caf59e2bb1265c2116e0c9a924","Linux 4.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-05-09T18:40:11.251562Z"},"published":"2024-04-17","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:17:57.964Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-26876","references":[{"url":"https://git.kernel.org/stable/c/67b92950912195b9c83e3d652d7eb3551741d850"},{"url":"https://git.kernel.org/stable/c/50f4b57e9a9db4ede9294f39b9e75b5f26bae9b7"},{"url":"https://git.kernel.org/stable/c/955c1252930677762e0db2b6b9e36938c887445c"},{"url":"https://git.kernel.org/stable/c/28a94271bd50e4cf498df0381f776f8ea40a289e"},{"url":"https://git.kernel.org/stable/c/aeedaee5ef5468caf59e2bb1265c2116e0c9a924"}],"tags":["cve.org"],"epss":0.00225,"epssPercentile":0.13237,"ingestedAt":"2026-11-03T12:44:28.800Z","slug":"CVE-2024-26876","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: adv7511: fix crash on irq during probe\n\nMoved IRQ registration down to end of adv7511_probe().\n\nIf an IRQ already is pending during adv7511_probe\n(before adv7511_cec_init) then cec_received_msg_ts\ncould crash using uninitialized data:\n\n    Unable to handle kernel read from unreadable memory at virtual address 00000000000003d5\n    Internal error: Oops: 96000004 [#1] PREEMPT_RT SMP\n    Call trace:\n     cec_received_msg_ts+0x48/0x990 [cec]\n     adv7511_cec_irq_process+0x1cc/0x308 [adv7511]\n     adv7511_irq_process+0xd8/0x120 [adv7511]\n     adv7511_irq_handler+0x1c/0x30 [adv7511]\n     irq_thread_fn+0x30/0xa0\n     irq_thread+0x14c/0x238\n     kthread+0x190/0x1a8\n\n## Affected\n\n- `Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 67b92950912195b9c83e3d652d7eb3551741d850`\n- `Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 50f4b57e9a9db4ede9294f39b9e75b5f26bae9b7`\n- `Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 955c1252930677762e0db2b6b9e36938c887445c`\n- `Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < 28a94271bd50e4cf498df0381f776f8ea40a289e`\n- `Linux >= 3b1b975003e4a3da4b93ab032487a3ae4afca7b5 < aeedaee5ef5468caf59e2bb1265c2116e0c9a924`\n- `Linux 4.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}