CVE-2024-53098: drm/xe/ufence: Prefetch ufence addr to catch bogus address
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/ufence: Prefetch ufence addr to catch bogus address
accessok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace.
(cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What versions of the Linux kernel are affected by CVE-2024-53098?
CVE-2024-53098 affects Linux kernel versions prior to 6.11.9 and versions 6.12-rc1 to 6.12-rc4.
What is the nature of the vulnerability identified as CVE-2024-53098?
CVE-2024-53098 is a vulnerability in the Linux kernel related to the handling of invalid memory addresses in the drm/xe/ufence.
What is the recommended action for managing CVE-2024-53098?
To mitigate CVE-2024-53098, users should upgrade to the latest stable version of the Linux kernel.
Has CVE-2024-53098 been resolved?
Yes, CVE-2024-53098 has been addressed in the Linux kernel updates following its identification.
What can happen if CVE-2024-53098 is exploited?
Exploitation of CVE-2024-53098 could potentially lead to accessing invalid memory locations, resulting in system instability or crashes.