# CVE-2024-50266: linux: In the Linux kernel, the following vulnerability has been resolved:  clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER f...

CVE-2024-50266 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-50266, released November 19, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-50266
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0020
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 19, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs  A recent change in the venus driver results in a stuck clock on the Lenovo ThinkPad X13s, for example, when streaming video in firefox:  	video_cc_mvs0_clk status stuck at 'off' 	WARNING: CPU: 6 PID: 2885 at drivers/clk/qcom/clk-branch.c:87 clk_branch_wait+0x144/0x15c 	... 	Call trace: 	 clk_branch_wait+0x144/0x15c 	 clk_branch2_enable+0x30/0x40 	 clk_core_enable+0xd8/0x29c 	 clk_enable+0x2c/0x4c 	 vcodec_clks_enable.isra.0+0x94/0xd8 [venus_core] 	 coreid_power_v4+0x464/0x628 [venus_core] 	 vdec_start_streaming+0xc4/0x510 [venus_dec] 	 vb2_start_streaming+0x6c/0x180 [videobuf2_common] 	 vb2_core_streamon+0x120/0x1dc [videobuf2_common] 	 vb2_streamon+0x1c/0x6c [videobuf2_v4l2] 	 v4l2_m2m_ioctl_streamon+0x30/0x80 [v4l2_mem2mem] 	 v4l_streamon+0x24/0x30 [videodev]  using the out-of-tree sm8350/sc8280xp venus support. [1]  Update also the sm8350/sc8280xp GDSC definitions so that the hw control mode can be changed at runtime as the venus driver now requires.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 13.5 (trixie) | 6.11.9-1 | [DEBIAN-CVE-2024-50266](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50266.md) | Nov 19, 2024 |
| Linux | linux Debian 14 | 6.11.9-1 | [DEBIAN-CVE-2024-50266](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50266.md) | Nov 19, 2024 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.