Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-53098

drm/xe/ufence: Prefetch ufence addr to catch bogus address

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/ufence: Prefetch ufence addr to catch bogus address access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace. (cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < 5d623ffbae96b23f1fc43a3d5a267aabdb07583daffected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < 9c1813b3253480b30604c680026c7dc721ce86d1affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.11.9 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References