CVE-2024-53098

drm/xe/ufence: Prefetch ufence addr to catch bogus address

High · published November 25, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/ufence: Prefetch ufence addr to catch bogus address

access_ok() only checks for addr overflow so also try to read the addr

to catch invalid addr sent from userspace.

(cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.0th percentile
Published
2024-11-25T21:21Z
EPSS history
Timeline
  • 25 NOV 21:21Z
    drm/xe/ufence: Prefetch ufence addr to catch bogus address
    cvelistv5