CVE-2024-42313: media: venus: fix use after free in vdec_close
In the Linux kernel, the following vulnerability has been resolved:
media: venus: fix use after free in vdecclose
There appears to be a possible use after free with vdecclose(). The firmware will add buffer release work to the work queue through HFI callbacks as a normal part of decoding. Randomly closing the decoder device from userspace during normal decoding can incur a read after free for inst.
Fix it by cancelling the work in vdecclose.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42313?
CVE-2024-42313 is classified as a high-severity vulnerability due to its potential for exploitation in the Linux kernel.
How do I fix CVE-2024-42313?
To remediate CVE-2024-42313, update your Linux kernel to version 5.10.226-1 or higher, or 6.1.123-1 or higher, as appropriate.
Which versions of the Linux kernel are affected by CVE-2024-42313?
CVE-2024-42313 affects multiple Linux kernel versions ranging from 4.13 to 6.10.3, excluding the patched versions.
What is a use after free vulnerability in the context of CVE-2024-42313?
In the context of CVE-2024-42313, a use after free vulnerability occurs when a program attempts to access memory after it has been released, potentially leading to undefined behavior.
What is vdec_close() in relation to CVE-2024-42313?
vdec_close() is a function in the Linux kernel media subsystem that has the use after free issue identified in CVE-2024-42313.