CVE-2024-50174: drm/panthor: Fix race when converting group handle to group object
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Fix race when converting group handle to group object
XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race between retrieving the pointer from the XArray and incrementing the reference count.
To avoid this race simply hold the internal XArray lock when incrementing the reference count, this ensures there cannot be a racing call to xaerase().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50174?
CVE-2024-50174 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50174?
To fix CVE-2024-50174, update your Linux kernel to a version that addresses this vulnerability.
Which versions of Linux kernel are affected by CVE-2024-50174?
CVE-2024-50174 affects Linux kernel versions from 6.10 to 6.10.14, from 6.11 to 6.11.3, and specifically 6.12-rc1.
What kind of vulnerability is CVE-2024-50174?
CVE-2024-50174 is a race condition vulnerability found in the Linux kernel's drm/panthor subsystem.
Is CVE-2024-50174 exploitable?
Yes, CVE-2024-50174 could potentially be exploited due to the race condition it presents in the kernel.