CVE-2024-53098

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-53098
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53098.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-53098
Downstream
Related
Published
2024-11-25T21:21:27Z
Modified
2025-10-21T23:29:08.889842Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
drm/xe/ufence: Prefetch ufence addr to catch bogus address
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/ufence: Prefetch ufence addr to catch bogus address

access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace.

(cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd08ebf6c3525a7ea2186e636df064ea47281987
Fixed
5d623ffbae96b23f1fc43a3d5a267aabdb07583d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd08ebf6c3525a7ea2186e636df064ea47281987
Fixed
9c1813b3253480b30604c680026c7dc721ce86d1

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.11.7
v6.11.8
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.7
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c1813b3253480b30604c680026c7dc721ce86d1",
        "target": {
            "function": "user_fence_create",
            "file": "drivers/gpu/drm/xe/xe_sync.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "function_hash": "330822138396856597137031537693242117558",
            "length": 459.0
        },
        "id": "CVE-2024-53098-1be95d3b"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c1813b3253480b30604c680026c7dc721ce86d1",
        "target": {
            "file": "drivers/gpu/drm/xe/xe_sync.c"
        },
        "signature_type": "Line",
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "306512168930597221599542370710383293269",
                "20452213982111056549273591458566407761",
                "302578726376060497353361596269161314789",
                "99613774914549781507307469816985917670",
                "157843895702302773897460089007477995682"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-53098-b3fa7713"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.11.9