CVE-2024-50187 drm/vc4: Stop the active perfmon before being destroyed

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Stop the active perfmon before being destroyed Upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed in vc4perfmonclosefile, the active performance monitor's...

CVE-2024-50177 drm/amd/display: fix a UBSAN warning in DML2.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 When programming phantom pipe, since cursorwidth is explicity set to 0, this causes calculation logic to trigger overflow for an unsigned int triggering the kernel's UBSAN check as...

CVE-2024-50174

CVE-2024-50174 affects the Linux kernel’s panthor DRM path. The issue is a race between retrieving a pointer from an XArray and incrementing its reference count when converting a group handle to a group object. The documented fix is to hold the internal XArray lock while incrementing the referenc...

CVE-2024-50174

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race...

CVE-2024-50174 drm/panthor: Fix race when converting group handle to group object

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race...

CVE-2024-50174 drm/panthor: Fix race when converting group handle to group object

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race...

CVE-2024-50173 drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

CVE-2024-50173 drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

CVE-2024-50173

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

CVE-2024-50173

The CVE-2024-50173 entry concerns the Linux kernel DRM panthor driver: tick_ctx_cleanup() could access an uninitialized or invalid group-derived ptdev due to using a group variable in the second loop. The fix replaces the approach with obtaining the ptdev object from the scheduler, preventing der...

SUSE CVE-2024-50144

In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put with fencefini Currently we can call fencefini twice if something goes wrong when sending the GuC CT for the tlb request, since we signal the fence and return an error, leading to the caller also...

SUSE CVE-2024-50149

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't free job in TDR Freeing job in TDR is not safe as TDR can pass the runjob thread resulting in UAF. It is only safe for free job to naturally be called by the scheduler. Rather free job in TDR, add to pending list...

CVE-2024-50174: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race...

CVE-2024-50173: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

CVE-2024-50187: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Stop the active perfmon before being destroyed Upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed in vc4perfmonclosefile, the active performance monitor's...

CVE-2024-50177: Integer Overflow or Wraparound

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 When programming phantom pipe, since cursorwidth is explicity set to 0, this causes calculation logic to trigger overflow for an unsigned int triggering the kernel's UBSAN check as...

CVE-2024-50201: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix encoder-possibleclones Include the encoder itself in its possibleclones bitmask. In the past nothing validated that drivers were populating possibleclones correctly, but that changed in commit 74d2aacbe840 "drm:...

CVE-2024-50149

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't free job in TDR Freeing job in TDR is not safe as TDR can pass the runjob thread resulting in UAF. It is only safe for free job to naturally be called by the scheduler. Rather free job in TDR, add to pending list...

AZL-53385 CVE-2024-50156 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Avoid NULL dereference in msmdispstateprintregs If the allocation in msmdispstatedumpregs failed then block-state can be NULL. The msmdispstateprintregs function does have code to try to handle it with: if reg dumpaddr =...

DEBIAN-CVE-2024-50149

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't free job in TDR Freeing job in TDR is not safe as TDR can pass the runjob thread resulting in UAF. It is only safe for free job to naturally be called by the scheduler. Rather free job in TDR, add to pending list...