CVE-2024-44956: drm/xe/preempt_fence: enlarge the fence critical section
First published: Wed Sep 04 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drm/xe/preempt_fence: enlarge the fence critical section It is really easy to introduce subtle deadlocks in preempt_fence_work_func() since we operate on single global ordered-wq for signalling our preempt fences behind the scenes, so even though we signal a particular fence, everything in the callback should be in the fence critical section, since blocking in the callback will prevent other published fences from signalling. If we enlarge the fence critical section to cover the entire callback, then lockdep should be able to understand this better, and complain if we grab a sensitive lock like vm->lock, which is also held when waiting on preempt fences.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <6.10.5 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/3cd1585e57908b6efcd967465ef7685f40b2a294
- https://git.kernel.org/stable/c/458bb83119dfee5d14c677f7846dd9363817006f
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44956
- https://nvd.nist.gov/vuln/detail/CVE-2024-44956
- https://launchpad.net/bugs/cve/CVE-2024-44956
- https://security-tracker.debian.org/tracker/CVE-2024-44956
- https://ubuntu.com/security/CVE-2024-44956
- https://git.kernel.org/linus/3cd1585e57908b6efcd967465ef7685f40b2a294
- agent/title
- agent/first-publish-date
- agent/type
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/remedy
- agent/severity
- agent/author
- agent/references
- collector/nvd-cve
- agent/tags
- collector/usn-cve
- source/Ubuntu
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/event
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/linux
- canonical/linux linux kernel
- package-manager/debian