Critical Memory Management Issue in Linux Kernel: drm/xe Workqueue Leak
Summary
DEBIAN-CVE-2024-44979: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing workqueue destroy in xe_gt_pagefault On driver reload we never free up the memory for the pagefault and access counter workqueues. Affects linux versions < 6.10.7-1. Fixed in 6.10.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including process management, memory management, and device drivers. The drm/xe subsystem is responsible for managing graphics processing units (GPUs) and their interactions with the operating system. This vulnerability specifically affects the memory management of workqueues related to page faults in the drm/xe driver, which can lead to resource leaks and potential system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/xe subsystem where the workqueues responsible for handling page faults and access counters are not properly destroyed upon driver reload. This oversight can lead to memory leaks, as the allocated resources for these workqueues are not freed, potentially resulting in degraded system performance or crashes over time. The issue was introduced in earlier versions and has been addressed in the patched version 6.10.7-1.
How To Fix
Minimum fixed version
6.10.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux kernel's drm/xe subsystem poses a risk of memory leaks due to improper management of workqueues. It is crucial to update to the patched version 6.10.7-1 to safeguard your system against potential performance issues and crashes. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to memory leaks, which may cause system performance degradation or crashes over time.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The vulnerability affects versions prior to 6.10.7-1 of the Linux kernel.
While the vulnerability does not have a known exploit at this time, it is advisable to apply the patch to mitigate any potential risks.
It is recommended to regularly check for updates to your system packages to ensure you have the latest security patches.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
