SECUFOCUSNOW
Home›CVE index›CVE-2024-26939
Review reviewHigh

CVE-2024-26939

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging tools were sporadically reporting illegal attempts to free a still active i915 VMA object when parking a GT believed to be idle. [161.359441] ODEBUG: free active (active state 0) object: ffff88811643b958 object type: i915_active hint: __i915_vma_active+0x0/0x50 [i915] [161.360082] WARNING: CPU: 5 PID: 276 at lib/debugobjects.c:514 debug_print_object+0x80/0xb0 ... [161.360304] CPU: 5 PID: 276 Comm: kworker/5:2 Not tainted 6.5.0-rc1-CI_DRM_13375-g003f860e55...

CVSS
7
EPSS
0.24%
14.9% percentile
CISA KEV
Not listed
Published
2024.05.01
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.24%
Technical severityCVSS 7

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging tools were sporadically reporting illegal attempts to free a still active i915 VMA object when parking a GT believed to be idle. [161.359441] ODEBUG: free active (active state 0) object: ffff88811643b958 object type: i915_active hint: __i915_vma_active+0x0/0x50 [i915] [161.360082] WARNING: CPU: 5 PID: 276 at lib/debugobjects.c:514 debug_print_object+0x80/0xb0 ... [161.360304] CPU: 5 PID: 276 Comm: kworker/5:2 Not tainted 6.5.0-rc1-CI_DRM_13375-g003f860e55...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= d93939730347360db0afe6a4367451b6f84ab7b1 < 704edc9252f4988ae1ad7dafa23d0db8d90d7190, >= d93939730347360db0afe6a4367451b6f84ab7b1 < 5e3eb862df9f972ab677fb19e0d4b9b1be8db7b5, >= d93939730347360db0afe6a4367451b6f84ab7b1 < 59b2626dd8c8a2e13f18054b3530e0c00073d79f, >= d93939730347360db0afe6a4367451b6f84ab7b1 < 0e45882ca829b26b915162e8e86dbb1095768e9e, >= 5.19, >= 5.19 < 6.1.88, >= 6.2 < 6.6.29, >= 6.7 < 6.8.3, 6.9
Fixed versions
6.1.88, 6.6.29, 6.8.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416