CVE-2024-44978: drm/xe: Free job before xe_exec_queue_put
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Free job before xeexecqueueput
Free job depends on job->vm being valid, the last xeexecqueueput can destroy the VM. Prevent UAF by freeing job before xeexecqueueput.
(cherry picked from commit 32a42c93b74c8ca6d0915ea3eba21bceff53042f)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44978?
CVE-2024-44978 is classified as a high severity vulnerability due to the potential for use-after-free conditions in the Linux kernel.
How do I resolve CVE-2024-44978?
To resolve CVE-2024-44978, it is recommended to update the Linux kernel to version 6.10.7 or later.
Which versions of the Linux kernel are affected by CVE-2024-44978?
CVE-2024-44978 affects Linux kernel versions from 6.8 up to 6.11-rc4.
What impact does CVE-2024-44978 have on system security?
CVE-2024-44978 can lead to potential system crashes or exploitation due to a use-after-free vulnerability.
Is there a specific patch for CVE-2024-44978?
Yes, CVE-2024-44978 is addressed in various patched versions, including 5.10.223-1 and 6.1.123-1.