PT-2025-3594

CVE-2024-57844

·

Published

2024-12-17

·

Updated

2025-01-16

Description by

CVSS 2.0
7.7
High
MetricsAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability has been resolved in the Linux kernel. The issue occurs when userspace holds an fd open, unbinds the device, and then closes it, causing the driver to attempt to access the hardware. This is fixed by using drm dev enter()/drm dev exit() to protect against the fault. The vulnerability results in a page fault, specifically a supervisor read access in kernel mode with an error code of 0x0000, indicating a not-present page. The functions involved include xe lrc update timestamp(), xe exec queue update run ticks(), xe exec queue fini(), guc exec queue fini async(), guc exec queue fini async(), guc exec queue fini(), xe exec queue destroy(), xe file close(), drm file free(), drm close helper.isra.0(), and drm release noglobal().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾