Threats tagged 'ghsa-xq4p-6j59-jfv4'

CVE-2024-35790 is a medium severity vulnerability in the Linux kernel's USB Type-C DisplayPort alternate mode driver. The issue arises because sysfs nodes for the DisplayPort driver may be accessible before the driver data is fully initialized, leading to potential NULL pointer dereferences when userspace reads certain sysfs attributes. This can cause a kernel crash (denial of service). The vulnerability is addressed by changing how sysfs nodes are created, using the ATTRIBUTE_GROUPS() macro to ensure proper initialization order and ABI compliance.