SECUFOCUSNOW
Home›CVE index›CVE-2024-41092
Review reviewHigh

CVE-2024-41092

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically reporting the following issue triggered by igt@i915_selftest@live@hangcheck on ADL-P and similar machines: <6> [414.049203] i915: Running intel_hangcheck_live_selftests/igt_reset_evict_fence ... <6> [414.068804] i915 0000:00:02.0: [drm] GT0: GUC: submission enabled <6> [414.068812] i915 0000:00:02.0: [drm] GT0: GUC: SLPC enabled <3> [414.070354] Unable to pin Y-tiled fence; err:-4 <3> [414.071282] i915_vma_revoke_fence:301 GEM_BUG_ON(!i915_...

CVSS
7.8
EPSS
0.27%
18.9% percentile
CISA KEV
Not listed
Published
2024.07.30
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.27%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically reporting the following issue triggered by igt@i915_selftest@live@hangcheck on ADL-P and similar machines: <6> [414.049203] i915: Running intel_hangcheck_live_selftests/igt_reset_evict_fence ... <6> [414.068804] i915 0000:00:02.0: [drm] GT0: GUC: submission enabled <6> [414.068812] i915 0000:00:02.0: [drm] GT0: GUC: SLPC enabled <3> [414.070354] Unable to pin Y-tiled fence; err:-4 <3> [414.071282] i915_vma_revoke_fence:301 GEM_BUG_ON(!i915_...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 0d86ee35097ae0f1c2c50f2b8035ef480e25e4f1 < f771b91f21c46ad1217328d05e72a2c7e3add535, >= 0d86ee35097ae0f1c2c50f2b8035ef480e25e4f1 < 29c0fdf49078ab161570d3d1c6e13d66f182717d, >= 0d86ee35097ae0f1c2c50f2b8035ef480e25e4f1 < ca0fabd365a27a94a36e68a7a02df8ff3c13dac6, >= 0d86ee35097ae0f1c2c50f2b8035ef480e25e4f1 < 06dec31a0a5112a91f49085e8a8fa1a82296d5c7, >= 0d86ee35097ae0f1c2c50f2b8035ef480e25e4f1 < 414f4a31f7a811008fd9a33b06216b060bad18fc, >= 0d86ee35097ae0f1c2c50f2b8035ef480e25e4f1 < 996c3412a06578e9d779a16b9e79ace18125ab50, >= 5.8, >= 5.8 < 5.10.221, >= 5.11 < 5.15.162, >= 5.16 < 6.1.97, >= 6.2 < 6.6.37, >= 6.7 < 6.9.8
Fixed versions
5.10.221, 5.15.162, 6.1.97, 6.6.37, 6.9.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416