Riskcovery

CVE-2024-40924

drm/i915/dpt: Make DPT object unshrinkable

State
Published
Severity
7.8 High
Published
Jul 12, 2024
Updated
Aug 5, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/dpt: Make DPT object unshrinkable

In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm->bound_list. Then it tries to rewrite the PTEs via a stale CPU mapping. This causes panic.

[vsyrjala: Add TODO comment] (cherry picked from commit 51064d471c53dcc8eddd2333c3f1c1d9131ba36c)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0dc987b699ce4266450d407d6d79d41eab88c5d0 to before 327280149066f0e5f2e50356b5823f76dabfe86eAffected
  • 0dc987b699ce4266450d407d6d79d41eab88c5d0 to before 7a9883be3b98673333eec65c4a21cc18e60292ebAffected
  • 0dc987b699ce4266450d407d6d79d41eab88c5d0 to before a2552020fb714ff357182c3c179abfac2289f84dAffected
  • 0dc987b699ce4266450d407d6d79d41eab88c5d0 to before 43e2b37e2ab660c3565d4cff27922bc70e79c3f1Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.95 through 6.1.*Not affected
  • 6.6.35 through 6.6.*Not affected
  • 6.9.6 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.