CVE-2024-42091: drm/xe: Check pat.ops before dumping PAT settings

Published Jul 29, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Check pat.ops before dumping PAT settings

We may leave pat.ops unset when running on brand new platform or when running as a VF. While the former is unlikely, the latter is valid (future) use case and will cause NPD when someone will try to dump PAT settings by debugfs.

It's better to check pointer to pat.ops instead of specific .dump hook, as we have this hook always defined for every .ops variant.

Affected Software

2 affected componentsFixes available
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Linux Linux kernel>=6.8<6.9.8

Event History

Jul 29, 2024
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
Description
Data Sourced
via NVD·06:15 PM
Description
Data Sourced
via NVD·06:15 PM
RemedySeverityWeaknessAffected Software
Apr 27, 2025
Data Sourced
via Ubuntu·12:32 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-42091?

CVE-2024-42091 has a medium severity rating due to its potential impacts on system security related to PAT settings in the Linux kernel.

2

How do I fix CVE-2024-42091?

To address CVE-2024-42091, upgrade to the patched versions of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.

3

Which software is affected by CVE-2024-42091?

CVE-2024-42091 affects the Linux kernel versions prior to the patched releases mentioned for Debian and related distributions.

4

What does CVE-2024-42091 exploit?

CVE-2024-42091 exploits improper handling of PAT operations, which may result in undefined behavior in certain conditions.

5

When was CVE-2024-42091 disclosed?

CVE-2024-42091 was disclosed as a vulnerability in the Linux kernel affecting various kernel versions, highlighting security configuration issues.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203