CVE-2024-42263: drm/v3d: Fix potential memory leak in the timestamp extension

Published Aug 17, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Fix potential memory leak in the timestamp extension

If fetching of userspace memory fails during the main loop, all drm sync objs looked up until that point will be leaked because of the missing drmsyncobjput.

Fix it by exporting and using a common cleanup helper.

(cherry picked from commit 753ce4fea62182c77e1691ab4f9022008f25b62e)

Affected Software

3 affected componentsFixes available
Linux Linux kernel>=6.8<6.10.4
Linux Linux kernel=6.11-rc1
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

Event History

Aug 17, 2024
CVE Published
via MITRE·08:54 AM
Data Sourced
via MITRE·08:54 AM
Description
Jan 13, 2025
Data Sourced
via Ubuntu·06:29 PM
RemedyDescriptionSeverityAffected Software
Mar 26, 2025
Data Sourced
via Debian·07:30 PM
DescriptionAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-42263?

CVE-2024-42263 has a high severity due to the potential memory leak in the Linux kernel's DRM subsystem.

2

How do I fix CVE-2024-42263?

You can fix CVE-2024-42263 by updating to the latest patched version of the Linux kernel that addresses this vulnerability.

3

Which versions of the Linux kernel are affected by CVE-2024-42263?

CVE-2024-42263 affects Linux kernel versions between 6.8 and 6.10.4, as well as version 6.11-rc1.

4

What type of vulnerability is CVE-2024-42263?

CVE-2024-42263 is a memory leak vulnerability in the DRM component of the Linux kernel.

5

Can CVE-2024-42263 be exploited remotely?

CVE-2024-42263 is primarily an issue within the local execution context of the Linux kernel, making remote exploitation less likely.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203