Race Condition Vulnerability in Linux Kernel's DRM Subsystem
Summary
DEBIAN-CVE-2024-56552: In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: fix race around suspend_pending Currently in some testcases we can trigger: xe 0000:03:00.0: [drm] Assertion exec_queue_destroyed(q)... Affects linux versions < 6.12.5-1. Fixed in 6.12.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. The kernel's Direct Rendering Manager (DRM) subsystem facilitates graphics rendering, allowing applications to interact with the GPU. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically in the DRM subsystem's handling of scheduling and queue management.
Vulnerability Detail
A race condition exists in the DRM subsystem related to the handling of suspend operations for execution queues. When a queue is suspended, a disable scheduling operation is triggered. If the user closes the queue during this process, it can lead to incorrect state management, causing the system to attempt to deregister a queue that is not yet marked for destruction. This can result in assertion failures and unexpected engine states, potentially leading to system instability and crashes.
How To Fix
Minimum fixed version
6.12.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The identified race condition vulnerability in the Linux kernel's DRM subsystem poses significant risks to system stability and graphics rendering. Users are advised to update to the patched version 6.12.5-1 to safeguard their systems. Regular monitoring for vulnerabilities using tools like Vulert can help maintain security in open-source software.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a race condition in the Linux kernel's DRM subsystem, affecting how execution queues are managed during suspend operations.
If exploited, this vulnerability can lead to system instability, crashes, and unexpected behavior in graphics rendering.
You can use Vulert to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected without requiring any installation.
Yes, a patch is available in the form of the Linux package version 6.12.5-1. It is recommended to update to this version.
While there are no specific workarounds, it is crucial to monitor the situation and apply the patch as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
