CVE-2024-53080CWE-667

CVE-2024-53080

High · published November 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Lock XArray when getting entries for the VM

Similar to commit cac075706f29 ("drm/panthor: Fix race when converting

group handle to group object") we need to use the XArray's internal

locking when retrieving a vm pointer from there.

v2: Removed part of the patch that was trying to protect fetching

the heap pointer from XArray, as that operation is protected by

the @pool->lock.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-11-19T23:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.10, < 6.11.86.11.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/3342f066a8e1020a6f7d1fbd6b23bfdeda473eb5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/444fa5b100e5c90550d6bccfe4476efb0391b3ca · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://project-zero.issues.chromium.org/issues/377500597 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 NOV 17:45Z
    drm/panthor: Lock XArray when getting entries for the VM
    cvelistv5