CVE-2024-42263 drm/v3d: Fix potential memory leak in the timestamp extension

2024-08-1708:54:20

Linux

www.cve.org

linux kernel

vulnerability

memory leak

fix

timestamp extension

EPSS

Percentile

9.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Fix potential memory leak in the timestamp extension

If fetching of userspace memory fails during the main loop, all drm sync
objs looked up until that point will be leaked because of the missing
drm_syncobj_put.

Fix it by exporting and using a common cleanup helper.

(cherry picked from commit 753ce4fea62182c77e1691ab4f9022008f25b62e)

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/v3d/v3d_drv.h",
      "drivers/gpu/drm/v3d/v3d_sched.c",
      "drivers/gpu/drm/v3d/v3d_submit.c"
    ],
    "versions": [
      {
        "version": "9ba0ff3e083f",
        "lessThan": "9b5033ee2c5a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9ba0ff3e083f",
        "lessThan": "0e50fcc20bd8",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/v3d/v3d_drv.h",
      "drivers/gpu/drm/v3d/v3d_sched.c",
      "drivers/gpu/drm/v3d/v3d_submit.c"
    ],
    "versions": [
      {
        "version": "6.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.8",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10.4",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.11",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]