CVE-2024-50149

drm/xe: Don't free job in TDR

State: Published
Severity: 7.8 High
Published: Nov 7, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Don't free job in TDR

Freeing job in TDR is not safe as TDR can pass the run_job thread resulting in UAF. It is only safe for free job to naturally be called by the scheduler. Rather free job in TDR, add to pending list.

(cherry picked from commit ea2f6a77d0c40d97f4a4dc93fee4afe15d94926d)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	e275d61c5f3ffc250b2a9601d36fbd11b4db774b to before be8fe75e57f8fa3f87e3b1c283cc7cd9f9b80867Affected e275d61c5f3ffc250b2a9601d36fbd11b4db774b to before 82926f52d7a09c65d916c0ef8d4305fc95d68c0cAffected
LinuxLinux	6.10Affected before 6.10Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.