CVE-2024-46709 drm/vmwgfx: Fix prime with external buffers
A null pointer dereference in the vmwgfx driver causes system crashes when handling external buffers, primarily affecting test environments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-46709?
CVE-2024-46709 is a high-severity vulnerability in Linux kernel, published on 13 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix prime with external buffers
Make sure that for external buffers mapping goes through the dma_buf interface instead of trying to access pages directly.
External buffers might not provide direct access to readable/writable pages so to make sure the bo's created from external dma_bufs can be read dma_buf interface has to be used.
Fixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't trigger this due to the fact that virtual machines will not have multiple GPUs but it enables better test coverage in IGT.
Which versions are affected by CVE-2024-46709?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-46709?
Apply the vendor's patch.
Is CVE-2024-46709 being exploited?
There is no known exploitation of CVE-2024-46709 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-46709, DEBIAN-CVE-2024-46709, GHSA-jc54-wrqp-vxf4, UBUNTU-CVE-2024-46709.