Security readout for executives and security teams
Plain-English summary
CVE-2024-58074 is a Linux kernel graphics driver bug in Intel i915 display handling. A specific encoder cleanup path can receive a missing state pointer and trigger a kernel oops. Sources do not provide CVSS, exploitation evidence, or broad impact details, so treat it as a stability and availability concern pending vendor guidance.
Executive priority
Monitor and patch through normal kernel maintenance unless the environment depends heavily on Intel i915 graphics where crashes affect availability. Escalate if vendor advisories later assign high severity or report exploitation.
Technical view
The fix changes drm/i915 encoder hooks to get intel_display from encoder instead of state. The kernel note says intel_sanitize_encoder() can call .disable() and .post_disable() with state set to NULL, creating a potential NULL-state oops condition in Linux kernel drm/i915 display code.
Likely exposure
Exposure appears limited to Linux systems using affected kernel builds with Intel i915 graphics/display functionality. The source bundle names Linux kernel versions including 6.12, 6.13.2, and 6.14 as affected, but does not provide distribution-specific package status.
Exploitation context
No active exploitation is supported by the supplied sources. The CVE is not marked in KEV, and the references describe a kernel bug fix rather than public exploitation. Practical exploitability is not established in the provided evidence.
Researcher notes
Evidence is sparse: no CVSS, CWE, exploit status, or distribution package matrix is included. The core issue is a NULL state argument path in drm/i915 encoder disable hooks, addressed by deriving intel_display from encoder instead.
Mitigation direction
- Check Linux distribution advisories for patched kernel packages covering CVE-2024-58074.
- Prioritize kernel updates on systems using Intel i915 graphics drivers.
- Track the referenced stable kernel commits for backport availability.
- Avoid inventing local workarounds unless validated by the kernel or distribution vendor.
Validation and detection
- Inventory Linux kernel versions across managed endpoints and servers.
- Identify systems loading or depending on the Intel i915 driver.
- Map installed kernels to distribution advisories for CVE-2024-58074.
- Confirm deployed kernels include the referenced stable fixes or vendor backports.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-58074 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/1885401569f24eb35c631bcc4e6543360dbe9292CVE reference, Linux
- https://git.kernel.org/stable/c/dc3806d9eb66d0105f8d55d462d4ef681d9eac59CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.