CVE-2024-46705 drm/xe: reset mmio mappings with devm
A null pointer dereference in the Linux kernel's Xe driver can cause a system crash if MMIO mappings are accessed after device removal.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-46705?
CVE-2024-46705 is a high-severity vulnerability in Linux kernel, published on 13 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: reset mmio mappings with devm
Set our various mmio mappings to NULL. This should make it easier to catch something rogue trying to mess with mmio after device removal. For example, we might unmap everything and then start hitting some mmio address which has already been unmamped by us and then remapped by something else, causing all kinds of carnage.
Weakness: CWE-476
Which versions are affected by CVE-2024-46705?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-46705?
Apply the vendor's patch.
Is CVE-2024-46705 being exploited?
There is no known exploitation of CVE-2024-46705 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-49321, AZL-49344, BELL-CVE-2024-46705, DEBIAN-CVE-2024-46705, GHSA-qfxc-fjvg-2qgm, ROOT-OS-UBUNTU-2204-CVE-2024-46705 and 1 more.