CVE-2024-40924 drm/i915/dpt: Make DPT object unshrinkable
A local attacker can trigger a kernel panic by exploiting a stale CPU mapping in the Intel i915 graphics driver, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-40924?
CVE-2024-40924 is a high-severity vulnerability in Linux kernel, published on 12 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/dpt: Make DPT object unshrinkable
In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm->bound_list. Then it tries to rewrite the PTEs via a stale CPU mapping. This causes panic.
[vsyrjala: Add TODO comment] (cherry picked from commit 51064d471c53dcc8eddd2333c3f1c1d9131ba36c)
Which versions are affected by CVE-2024-40924?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-40924?
Apply the vendor's patch.
Is CVE-2024-40924 being exploited?
There is no known exploitation of CVE-2024-40924 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-40924, DEBIAN-CVE-2024-40924, GHSA-fmcq-989j-68j8, UBUNTU-CVE-2024-40924.