CVE-2024-39486

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the drm file update pid() function within the drivers/gpu/drm/drm file.c module of the Linux kernel video driver. The issue occurs because the function increments the reference count of a struct pid only after storing a pointer to it in filp->pid and releasing the dev->filelist mutex. This sequence allows a use-after-free (UAF) scenario where a struct pid is freed while another process attempts to access it via get pid(). This condition is specifically associated with CONFIG PREEMPT RCU=y, as it requires Read-Copy-Update (RCU)—a synchronization mechanism used to protect shared data from simultaneous access—to detect a quiescent state in code not explicitly calling the scheduler. Exploitation of this issue could impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.