Critical Fix for Linux Kernel Vulnerability in drm/xe Package
Summary
DEBIAN-CVE-2024-50144: In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put() with fence_fini() Currently we can call fence_fini() twice if something goes wrong when sending the GuC CT for the tlb... Affects linux versions < 6.11.6-1. Fixed in 6.11.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of the operating system that manages hardware resources and provides essential services for software applications. It is known for its stability, performance, and security. The drm/xe subsystem is responsible for managing graphics rendering and display. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the handling of reference counting in the drm/xe subsystem, which can lead to improper device suspension.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/xe subsystem where the function fence_fini() can be called multiple times under certain error conditions. This can lead to an unbalanced reference count, causing the device to enter a suspend state unexpectedly. The issue arises when an error occurs while sending the GuC CT for the TLB request, resulting in the fence being signaled and an error returned. The caller may then erroneously call fini() again, leading to an additional rpm put() that can disrupt device operation.
How To Fix
Minimum fixed version
6.11.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, ensuring that the system is updated to the latest version is the best practice to mitigate potential risks.
Conclusion
The vulnerability in the Linux kernel's drm/xe subsystem poses a risk of improper device suspension due to unbalanced reference counting. Updating to the patched version 6.11.6-1 is crucial for maintaining system integrity and performance. Regular monitoring with tools like Vulert can help ensure your software remains secure.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves an unbalanced reference counting issue in the drm/xe subsystem of the Linux kernel, which can lead to improper device suspension.
The vulnerability affects the Linux kernel versions in Debian 13 and 14 prior to the fixed version 6.11.6-1.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
While there are no specific workarounds, it is advisable to monitor your system closely and apply the update as soon as possible to mitigate risks.
Yes, it can lead to unexpected device behavior, which may impact system stability and performance.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
