CVE-2024-53098

drm/xe/ufence: Prefetch ufence addr to catch bogus address

State: Published
Severity: 7.8 High
Published: Nov 25, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/ufence: Prefetch ufence addr to catch bogus address

access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace.

(cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	dd08ebf6c3525a7ea2186e636df064ea47281987 to before 5d623ffbae96b23f1fc43a3d5a267aabdb07583dAffected dd08ebf6c3525a7ea2186e636df064ea47281987 to before 9c1813b3253480b30604c680026c7dc721ce86d1Affected
LinuxLinux	6.8Affected before 6.8Not affected 6.11.9 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.