CVE-2024-46718: drm/xe: Don't overmap identity VRAM mapping
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Don't overmap identity VRAM mapping
Overmapping the identity VRAM mapping is triggering hardware bugs on certain platforms. Use 2M pages for the last unaligned (to 1G) VRAM chunk.
v2: - Always use 2M pages for last chunk (Fei Yang) - break loop when 2M pages are used - Add assert for usablesize being 2M aligned v3: - Fix checkpatch
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
For the last VRAM chunk that is unaligned to 1G, always use 2M pages and break the mapping loop when 2M pages are used.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46718?
CVE-2024-46718 is considered a medium severity vulnerability due to potential hardware bugs on certain platforms.
How do I fix CVE-2024-46718?
To fix CVE-2024-46718, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, or 6.12.11-1.
What systems are affected by CVE-2024-46718?
CVE-2024-46718 affects certain Linux systems using specific kernel versions that manage VRAM mapping.
What is the nature of the issue in CVE-2024-46718?
CVE-2024-46718 involves overmapping identity VRAM mapping which can trigger hardware bugs.
Is there a workaround for CVE-2024-46718?
Currently, the recommended action is to apply the appropriate kernel updates as there are no documented workarounds.