CVE-2024-46709

CVE-2024-46709

High · published September 13, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: Fix prime with external buffers

Make sure that for external buffers mapping goes through the dma_buf

interface instead of trying to access pages directly.

External buffers might not provide direct access to readable/writable

pages so to make sure the bo's created from external dma_bufs can be

read dma_buf interface has to be used.

Fixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't

trigger this due to the fact that virtual machines will not have

multiple GPUs but it enables better test coverage in IGT.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Published
2024-09-13T11:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6.29, < 6.6.496.6.49
linux/linux_kernel≥ 6.8.8, < 6.96.9
linux/linux_kernel≥ 6.9, < 6.10.86.10.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 13 SEP 06:33Z
    drm/vmwgfx: Fix prime with external buffers
    cvelistv5