Critical Vulnerability in Linux Kernel: EnhancedPrefetchScheduleAccelerationFinal Issue
Summary
DEBIAN-CVE-2024-50004: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 [WHY & HOW] Mismatch in DCN35 DML2 cause bw validation failed to acq... Affects linux versions < 6.11.4-1. Fixed in 6.11.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting system reliability and security. This specific vulnerability affects the Linux kernel versions in Debian 13 and 14, particularly in the drm/amd/display subsystem, which is responsible for managing display outputs.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/amd/display subsystem related to the EnhancedPrefetchScheduleAccelerationFinal policy in DCN35. This mismatch can lead to bandwidth validation failures, resulting in unexpected DPP pipe acquisition, which may cause grey screens and system hangs. The issue stems from an improper override of the EnhancedPrefetchScheduleAccelerationFinal value, which does not align with hardware specifications. This vulnerability can severely disrupt user experience and system functionality.
How To Fix
Minimum fixed version
6.11.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling certain display features or reverting to an earlier stable version of the kernel until the update can be applied. However, this may not be a permanent solution and is not recommended for long-term use.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to system stability and user experience. It is crucial for users to update their systems to the patched version to mitigate these risks. Utilizing tools like Vulert can help in monitoring for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a mismatch in the EnhancedPrefetchScheduleAccelerationFinal policy in the Linux kernel, leading to potential system hangs and grey screens.
The affected versions are those prior to 6.11.4-1 in both Debian 13 and Debian 14.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Failure to address this vulnerability may lead to system instability, including unexpected crashes and display issues, which can disrupt user activities.
While a permanent fix is to update the kernel, users can temporarily disable certain display features or revert to an earlier stable kernel version as a workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
