CVE-2024-50030

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free (UAF) vulnerability in the send recv() function, specifically in the drm/xe/ct module of the Linux kernel. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability arises due to the lack of proper synchronization with the completion side, which can lead to a fence going out of scope on the stack before the timeout. Additionally, there are dependent loads and stores that require correct ordering, but the necessary barriers are lacking. The fix involves grabbing the ct->lock after the wait to ensure proper serialization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.