CVE-2024-40924: drm/i915/dpt: Make DPT object unshrinkable
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/dpt: Make DPT object unshrinkable
In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm->boundlist. Then it tries to rewrite the PTEs via a stale CPU mapping. This causes panic.
[vsyrjala: Add TODO comment] (cherry picked from commit 51064d471c53dcc8eddd2333c3f1c1d9131ba36c)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40924?
CVE-2024-40924 has been classified with moderate severity affecting the Linux kernel.
How do I fix CVE-2024-40924?
To address CVE-2024-40924, upgrade your Linux kernel to version 6.1.95 or later for Red Hat or to version 5.10.223-1, 6.1.119-1 or other specified versions for Debian.
What are the affected Linux kernel versions for CVE-2024-40924?
CVE-2024-40924 impacts several versions of the Linux kernel including but not limited to 5.10.x, 6.1.x, and 6.6.x found in both Red Hat and Debian distributions.
Is CVE-2024-40924 a local or remote vulnerability?
CVE-2024-40924 is considered a local vulnerability that requires local user access to exploit.
What components of the Linux kernel are affected by CVE-2024-40924?
CVE-2024-40924 specifically affects the Direct Rendering Manager (DRM) component related to the Intel graphics drivers.