In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: prime: fix refcount underflow
Calling nouveauboref() on a nouveaubo without initializing it (and hence the backing ttmbo) leads to a refcount underflow.
Instead of calling nouveauboref() in the unwind path of drmgemobject_init(), clean things up manually.
(cherry picked from commit 1b93f3e89d03cfc576636e195466a0d728ad8de5)
[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c",
"function": "nouveau_gem_prime_import_sg_table"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a1b327d57a8ac080977633a18999f032d7e9e3f",
"digest": {
"length": 870.0,
"function_hash": "36536996750704156015360585364043719167"
},
"id": "CVE-2024-43867-074dea0b"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c",
"function": "nouveau_gem_prime_import_sg_table"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f23cd66933fe76b84d8e282e5606b4d99068c320",
"digest": {
"length": 870.0,
"function_hash": "36536996750704156015360585364043719167"
},
"id": "CVE-2024-43867-19707708"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f23cd66933fe76b84d8e282e5606b4d99068c320",
"digest": {
"line_hashes": [
"147423670373914868603382704692291210447",
"315446956625507845953936772971966802838",
"104527488160886586285223132413769474670",
"155330013784339384866184914553646626592"
],
"threshold": 0.9
},
"id": "CVE-2024-43867-1faa129e"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ebebba4d357b6c67f96776a48ddbaf0060fa4c10",
"digest": {
"line_hashes": [
"147423670373914868603382704692291210447",
"315446956625507845953936772971966802838",
"104527488160886586285223132413769474670",
"155330013784339384866184914553646626592"
],
"threshold": 0.9
},
"id": "CVE-2024-43867-48126279"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16998763c62bb465ebc409d0373b9cdcef1a61a6",
"digest": {
"line_hashes": [
"147423670373914868603382704692291210447",
"315446956625507845953936772971966802838",
"104527488160886586285223132413769474670",
"155330013784339384866184914553646626592"
],
"threshold": 0.9
},
"id": "CVE-2024-43867-5bcbe141"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a1b327d57a8ac080977633a18999f032d7e9e3f",
"digest": {
"line_hashes": [
"147423670373914868603382704692291210447",
"315446956625507845953936772971966802838",
"104527488160886586285223132413769474670",
"155330013784339384866184914553646626592"
],
"threshold": 0.9
},
"id": "CVE-2024-43867-73f52147"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9bf3efc33f1fbf88787a277f7349459283c9b95",
"digest": {
"line_hashes": [
"147423670373914868603382704692291210447",
"315446956625507845953936772971966802838",
"104527488160886586285223132413769474670",
"155330013784339384866184914553646626592"
],
"threshold": 0.9
},
"id": "CVE-2024-43867-8da9592d"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c",
"function": "nouveau_gem_prime_import_sg_table"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@906372e753c5027a1dc88743843b6aa2ad1aaecf",
"digest": {
"length": 807.0,
"function_hash": "139635728672992786946985769246625898962"
},
"id": "CVE-2024-43867-92662473"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c",
"function": "nouveau_gem_prime_import_sg_table"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9bf3efc33f1fbf88787a277f7349459283c9b95",
"digest": {
"length": 870.0,
"function_hash": "36536996750704156015360585364043719167"
},
"id": "CVE-2024-43867-987be395"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@906372e753c5027a1dc88743843b6aa2ad1aaecf",
"digest": {
"line_hashes": [
"294740638966483740790540686589626725603",
"315446956625507845953936772971966802838",
"104527488160886586285223132413769474670",
"155330013784339384866184914553646626592"
],
"threshold": 0.9
},
"id": "CVE-2024-43867-aa8ff37a"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3bcb8bba72ce89667fa863054956267c450c47ef",
"digest": {
"line_hashes": [
"294740638966483740790540686589626725603",
"315446956625507845953936772971966802838",
"104527488160886586285223132413769474670",
"155330013784339384866184914553646626592"
],
"threshold": 0.9
},
"id": "CVE-2024-43867-ab40f705"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c",
"function": "nouveau_gem_prime_import_sg_table"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ebebba4d357b6c67f96776a48ddbaf0060fa4c10",
"digest": {
"length": 863.0,
"function_hash": "227620972247424663499664318186304201664"
},
"id": "CVE-2024-43867-b867e302"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c",
"function": "nouveau_gem_prime_import_sg_table"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3bcb8bba72ce89667fa863054956267c450c47ef",
"digest": {
"length": 806.0,
"function_hash": "222751368140266324632461383230689286566"
},
"id": "CVE-2024-43867-bf4a908f"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_prime.c",
"function": "nouveau_gem_prime_import_sg_table"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16998763c62bb465ebc409d0373b9cdcef1a61a6",
"digest": {
"length": 863.0,
"function_hash": "227620972247424663499664318186304201664"
},
"id": "CVE-2024-43867-e8c9cca1"
}
]