CVE-2024-46709 drm/vmwgfx: Fix prime with external buffers

2024-09-1306:33:41

Linux

www.cve.org

linux kernel

vulnerability

prime

external buffers

dma_buf

crashes

igt

EPSS

Percentile

16.3%

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: Fix prime with external buffers

Make sure that for external buffers mapping goes through the dma_buf
interface instead of trying to access pages directly.

External buffers might not provide direct access to readable/writable
pages so to make sure the bo’s created from external dma_bufs can be
read dma_buf interface has to be used.

Fixes crashes in IGT’s kms_prime with vgem. Regular desktop usage won’t
trigger this due to the fact that virtual machines will not have
multiple GPUs but it enables better test coverage in IGT.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/vmwgfx/vmwgfx_blit.c",
      "drivers/gpu/drm/vmwgfx/vmwgfx_drv.h",
      "drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c"
    ],
    "versions": [
      {
        "version": "65674218b43f",
        "lessThan": "9a9716bbbf3d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b32233acceff",
        "lessThan": "5c12391ee1ab",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b32233acceff",
        "lessThan": "50f119925091",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/vmwgfx/vmwgfx_blit.c",
      "drivers/gpu/drm/vmwgfx/vmwgfx_drv.h",
      "drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c"
    ],
    "versions": [
      {
        "version": "6.9",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.9",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.49",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10.8",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.11",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]