Kernel Vulnerability in Linux Package: drm/xe Fault Handling on FD Close
Summary
DEBIAN-CVE-2024-57844: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the... Affects linux versions < 6.12.9-1. Fixed in 6.12.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionality for managing hardware resources and system processes. It is responsible for interfacing with various hardware components, ensuring efficient operation and resource allocation. This package is critical for system stability and performance, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/xe subsystem, where a fault occurs when a file descriptor (fd) is closed after unbinding the device. If userspace holds an fd open, unbinds the device, and then closes it, the driver attempts to access hardware that is no longer available, leading to a page fault. This issue can result in system instability and crashes, as evidenced by the error messages indicating supervisor read access in kernel mode and the inability to handle page faults.
How To Fix
Minimum fixed version
6.12.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any potential risks.
Conclusion
The vulnerability identified in the Linux kernel's drm/xe subsystem poses a significant risk to system stability and performance. It is crucial for users to update to the patched version 6.12.9-1 to mitigate these risks. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a fault in the drm/xe subsystem of the Linux kernel, which can lead to system crashes when a file descriptor is closed after unbinding a device.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By simply using a manifest file like package-lock.json, you can check for vulnerabilities without needing to access the code.
If exploited, this vulnerability can lead to system instability, crashes, and potential data loss due to the inability to handle page faults in kernel mode.
Yes, a patch is available in version 6.12.9-1 of the Linux package. It is recommended to update to this version to mitigate the vulnerability.
You can use Vulert's playground to monitor your applications for vulnerabilities in real-time, ensuring you are always aware of any potential risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
