CVE-2024-53098
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-53098
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53098.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-53098
- Downstream
- Related
- Published
- 2024-11-25T21:21:27Z
- Modified
- 2025-10-21T23:29:08.889842Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- drm/xe/ufence: Prefetch ufence addr to catch bogus address
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/ufence: Prefetch ufence addr to catch bogus address
access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace.
(cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceddd08ebf6c3525a7ea2186e636df064ea47281987Fixed5d623ffbae96b23f1fc43a3d5a267aabdb07583d
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceddd08ebf6c3525a7ea2186e636df064ea47281987Fixed9c1813b3253480b30604c680026c7dc721ce86d1
Affected versions
v6.*
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.11.7
v6.11.8
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.7
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c1813b3253480b30604c680026c7dc721ce86d1",
"target": {
"function": "user_fence_create",
"file": "drivers/gpu/drm/xe/xe_sync.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53098-1be95d3b",
"signature_type": "Function",
"digest": {
"length": 459.0,
"function_hash": "330822138396856597137031537693242117558"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c1813b3253480b30604c680026c7dc721ce86d1",
"target": {
"file": "drivers/gpu/drm/xe/xe_sync.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53098-b3fa7713",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"306512168930597221599542370710383293269",
"20452213982111056549273591458566407761",
"302578726376060497353361596269161314789",
"99613774914549781507307469816985917670",
"157843895702302773897460089007477995682"
]
}
}
]