CVE-2024-21471: Use After Free in Graphics Linux
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/graphics-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21471?
CVE-2024-21471 has a high severity rating due to its potential to cause memory corruption during IOMMU unmap of a GPU buffer.
How do I fix CVE-2024-21471?
To fix CVE-2024-21471, apply the latest security patches provided by your operating system vendor or firmware provider.
Which systems are affected by CVE-2024-21471?
CVE-2024-21471 affects Linux systems utilizing GPU buffers and various Qualcomm firmware environments, particularly on Android.
What are the potential impacts of CVE-2024-21471?
The impacts of CVE-2024-21471 include potential system crashes, data corruption, or arbitrary code execution due to memory corruption.
Is CVE-2024-21471 under active exploitation?
As of the last update, there is no publicly available information confirming the active exploitation of CVE-2024-21471.