CVE-2024-42146: drm/xe: Add outer runtime_pm protection to xe_live_ktest@xe_dma_buf
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Add outer runtimepm protection to xelivektest@xedmabuf
Any kunit doing any memory access should get their own runtimepm outer references since they don't use the standard driver API entries. In special this dmabuf from the same driver.
Found by pre-merge CI on adding WARN calls for unprotected inner callers:
<6> [318.639739] # xedmabufkunit: running xetestdmabufimportsamedriver <4> [318.639957] ------------[ cut here ]------------ <4> [318.639967] xe 0000:4d:00.0: Missing outer runtime PM protection <4> [318.640049] WARNING: CPU: 117 PID: 3832 at drivers/gpu/drm/xe/xepm.c:533 xepmruntimegetnoresume+0x48/0x60 [xe]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42146?
CVE-2024-42146 is classified as a moderate severity vulnerability in the Linux kernel related to insufficient runtime_pm protections.
How do I fix CVE-2024-42146?
To fix CVE-2024-42146, update to a fixed version of the Linux kernel such as 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which software versions are affected by CVE-2024-42146?
CVE-2024-42146 affects Linux kernel versions from 6.8 up to but not including 6.9.9.
What type of vulnerabilities does CVE-2024-42146 address?
CVE-2024-42146 addresses vulnerabilities related to runtime power management in the Linux kernel's DRM subsystem.
Is there any workaround for CVE-2024-42146?
There are no specific workarounds for CVE-2024-42146, so it is recommended to apply the appropriate kernel updates.