CVE-2024-57844
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/01/2025
Last modified:
15/01/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/xe: Fix fault on fd close after unbind<br />
<br />
If userspace holds an fd open, unbinds the device and then closes it,<br />
the driver shouldn&#39;t try to access the hardware. Protect it by using<br />
drm_dev_enter()/drm_dev_exit(). This fixes the following page fault:<br />
<br />
[IGT] xe_wedged: exiting, ret=98<br />
BUG: unable to handle page fault for address: ffffc901bc5e508c<br />
#PF: supervisor read access in kernel mode<br />
#PF: error_code(0x0000) - not-present page<br />
...<br />
xe_lrc_update_timestamp+0x1c/0xd0 [xe]<br />
xe_exec_queue_update_run_ticks+0x50/0xb0 [xe]<br />
xe_exec_queue_fini+0x16/0xb0 [xe]<br />
__guc_exec_queue_fini_async+0xc4/0x190 [xe]<br />
guc_exec_queue_fini_async+0xa0/0xe0 [xe]<br />
guc_exec_queue_fini+0x23/0x40 [xe]<br />
xe_exec_queue_destroy+0xb3/0xf0 [xe]<br />
xe_file_close+0xd4/0x1a0 [xe]<br />
drm_file_free+0x210/0x280 [drm]<br />
drm_close_helper.isra.0+0x6d/0x80 [drm]<br />
drm_release_noglobal+0x20/0x90 [drm]<br />
<br />
(cherry picked from commit 4ca1fd418338d4d135428a0eb1e16e3b3ce17ee8)