UBUNTU-CVE-2024-53056

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

UBUNTU-CVE-2024-53087

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix possible exec queue leak in exec IOCTL In a couple of places after an exec queue is looked up the exec IOCTL returns on input errors without dropping the exec queue ref. Fix this ensuring the exec queue ref is dropped...

UBUNTU-CVE-2024-53078

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix NULL vs ISERR check in probe The iommupagingdomainalloc function doesn't return NULL pointers, it returns error pointers. Update the check to match...

CVE-2024-53087 drm/xe: Fix possible exec queue leak in exec IOCTL

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix possible exec queue leak in exec IOCTL In a couple of places after an exec queue is looked up the exec IOCTL returns on input errors without dropping the exec queue ref. Fix this ensuring the exec queue ref is dropped...

CVE-2024-53087 drm/xe: Fix possible exec queue leak in exec IOCTL

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix possible exec queue leak in exec IOCTL In a couple of places after an exec queue is looked up the exec IOCTL returns on input errors without dropping the exec queue ref. Fix this ensuring the exec queue ref is dropped...

CVE-2024-53086

Technical details about CVE-2024-53086 are not publicly provided in the supplied documents. Please monitor for updates from kernel commits and vendor advisories to obtain affected products, vulnerable components, and remediation.

CVE-2024-53086 drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...

CVE-2024-53086 drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...

CVE-2024-53086 drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...

CVE-2024-53084 drm/imagination: Break an object reference loop

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Break an object reference loop When remaining resources are being cleaned up on driver close, outstanding VM mappings may result in resources being leaked, due to an object reference loop, as shown below, with ea...

CVE-2024-53084

CVE-2024-53084 affects the Linux kernel’s DRM/Imagination driver path for PVR, where a resource cleanup reference loop between PVR VM Context and VM Mappings could leak VM resources. The official fix breaks the loop by freeing outstanding VM mappings before destroying the PVR Context associated w...

CVE-2024-53084 drm/imagination: Break an object reference loop

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Break an object reference loop When remaining resources are being cleaned up on driver close, outstanding VM mappings may result in resources being leaked, due to an object reference loop, as shown below, with ea...

CVE-2024-53084 drm/imagination: Break an object reference loop

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Break an object reference loop When remaining resources are being cleaned up on driver close, outstanding VM mappings may result in resources being leaked, due to an object reference loop, as shown below, with ea...

CVE-2024-53080 drm/panthor: Lock XArray when getting entries for the VM

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Lock XArray when getting entries for the VM Similar to commit cac075706f29 "drm/panthor: Fix race when converting group handle to group object" we need to use the XArray's internal locking when retrieving a vm pointe...

CVE-2024-53080

The CVE concerns the Linux kernel’s panthor driver. A vulnerability in panthor_vm_pool_get_vm() (drivers/gpu/drm/panthor/panthor_mmu.c) arises from incorrect locking while retrieving a VM pointer from the panthor pool. The underlying issue is improper use of XArray locking, which could allow a lo...

CVE-2024-53080 drm/panthor: Lock XArray when getting entries for the VM

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Lock XArray when getting entries for the VM Similar to commit cac075706f29 "drm/panthor: Fix race when converting group handle to group object" we need to use the XArray's internal locking when retrieving a vm pointe...

CVE-2024-53078 drm/tegra: Fix NULL vs IS_ERR() check in probe()

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix NULL vs ISERR check in probe The iommupagingdomainalloc function doesn't return NULL pointers, it returns error pointers. Update the check to match...

CVE-2024-53078 drm/tegra: Fix NULL vs IS_ERR() check in probe()

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix NULL vs ISERR check in probe The iommupagingdomainalloc function doesn't return NULL pointers, it returns error pointers. Update the check to match...

CVE-2024-53078 drm/tegra: Fix NULL vs IS_ERR() check in probe()

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix NULL vs ISERR check in probe The iommupagingdomainalloc function doesn't return NULL pointers, it returns error pointers. Update the check to match...

CVE-2024-53078

In CVE-2024-53078, Linux kernel vulnerability exists in drm/tegra: probe() where the code checked for NULL after calling iommu_paging_domain_alloc(). The function does not return NULL pointers; it returns error pointers. The fix updates the check to treat error pointers correctly, aligning the pr...