PT-2025-3594 · Linux · Linux Kernel

Lucas De Marchi

+2

·

Published

2024-12-17

·

Updated

2025-01-16

·

CVE-2024-57844

CVSS v2.0

7.7

High

VectorAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability has been resolved in the Linux kernel. The issue occurs when userspace holds an fd open, unbinds the device, and then closes it, causing the driver to attempt to access the hardware. This is fixed by using drm dev enter()/drm dev exit() to protect against the fault. The vulnerability results in a page fault, specifically a supervisor read access in kernel mode with an error code of 0x0000, indicating a not-present page. The functions involved include xe lrc update timestamp(), xe exec queue update run ticks(), xe exec queue fini(), guc exec queue fini async(), guc exec queue fini async(), guc exec queue fini(), xe exec queue destroy(), xe file close(), drm file free(), drm close helper.isra.0(), and drm release noglobal().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2025-04476
CVE-2024-57844

Affected Products

Linux Kernel