PT-2024-10404 · Linux+9 · Linux Kernel+9

Shawn Lee · Published 2024-05-20 · Updated 2025-10-06 · CVE-2024-40924

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the DRM driver in the Linux kernel, specifically with the DPT object. In some scenarios, the DPT object gets shrunk, but the actual framebuffer remains, causing the system to try to rewrite the PTEs via a stale CPU mapping, leading to a panic. The vulnerability is associated with incorrect control of resource identifiers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

ALSA-2024:8856

ALSA-2024:8870

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-00926

CESA-2024_8856

CESA-2024_8870

CVE-2024-40924

DLA-4008-1

DSA-5731-1

INFSA-2024_8856

INFSA-2024_8870

INFSA-2024_9315

OESA-2025-1097

OPENSUSE-SU-2024_2947-1

RHSA-2024:8856

RHSA-2024:8870

RHSA-2024:9315

RHSA-2024:9546

RHSA-2024_8856

RHSA-2024_8870

RHSA-2024_9315

RLSA-2024:8856

RLSA-2024:8870

SUSE-SU-2024:2894-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2947-1

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2438

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40924.json · Exploit
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53122 · Security Note
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40921 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7029-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46711 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-49988 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-50096 · Security Note
• https://ubuntu.com/security/CVE-2024-38634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38621 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-53109 · Security Note