CVE-2024-35810: drm/vmwgfx: Fix the lifetime of the bo cursor memory
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix the lifetime of the bo cursor memory
The cleanup can be dispatched while the atomic update is still active, which means that the memory acquired in the atomic update needs to not be invalidated by the cleanup. The buffer objects in vmwplanestate instead of using the builtin mapandcache were trying to handle the lifetime of the mapped memory themselves, leading to crashes.
Use the mapandcache instead of trying to manage the lifetime of the buffer objects held by the vmwplanestate.
Fixes kernel oops'es in IGT's kmscursorlegacy forked-bo.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix the lifetime of the bo cursor memory
The Linux kernel CVE team has assigned CVE-2024-35810 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35810-1b33@gregkh/T
— Red Hat
Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw when manage the lifetime of the buffer objects held by the vmwplanestate. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35810?
The severity of CVE-2024-35810 is not explicitly stated, but it involves a potential memory management issue in the Linux kernel.
How do I fix CVE-2024-35810?
To fix CVE-2024-35810, upgrade the Linux kernel to version 6.6.24, 6.7.12, 6.8.3, 6.9, or any applicable versions from the mentioned Debian releases.
Which versions of the Linux kernel are affected by CVE-2024-35810?
CVE-2024-35810 affects multiple versions of the Linux kernel, set forth before version 6.6.24, 6.7.12, 6.8.3, and 6.9.
Who discovered CVE-2024-35810?
CVE-2024-35810 is part of updates in the Linux kernel and is addressed by the maintainers of the kernel.
Is CVE-2024-35810 a critical vulnerability?
While not labeled as critical, CVE-2024-35810 does pose a potential risk related to memory management which warrants an update.