cbcvebase.
CVE-2024-26937
published 2024-05-01

CVE-2024-26937: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with strict in order…

PriorityP423medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.27%
18.9th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with strict in order execution, we could complete execution only when the queue was empty. Preempt-to-busy allows replacement of an active request that may complete before the preemption is processed by HW. If that happens, the request is retired from the queue, but the queue_priority_hint remains set, preventing direct submission until after the next CS interrupt is processed. This preempt-to-busy race can be triggered by the heartbeat, which will also act as the power-management barrier and upon completion allow us to idle the HW. We may process the completion of the heartbeat, and begin parking the engine before the CS event that restores the queue_priority_hint, causing us to fail the assertion that it is MIN. [ 166.210729] __engine_park:283 GEM_BUG_ON(engine->sched_engine->queue_priority_hint != (-((int)(~0U >> 1)) - 1)) [ 166.210781] Dumping ftrace buffer: [ 166.210795] --------------------------------- ... [ 167.302811] drm_fdin-1097 2..s1. 165741070us : trace_ports: 0000:00:02.0 rcs0: promote { ccid:20 1217:2 prio 0 } [ 167.302861] drm_fdin-1097 2d.s2. 165741072us : execlists_submission_tasklet: 0000:00:02.0 rcs0: preempting last=1217:2, prio=0, hint=2147483646 [ 167.302928] drm_fdin-1097 2d.s2. 165741072us : __i915_request_unsubmit: 0000:00:02.0 rcs0: fence 1217:2, current 0 [ 167.302992] drm_fdin-1097 2d.s2. 165741073us : __i915_request_submit: 0000:00:02.0 rcs0: fence 3:4660, current 4659 [ 167.303044] drm_fdin-1097 2d.s1. 165741076us : execlists_submission_tasklet: 0000:00:02.0 rcs0: context:3 schedule-in, ccid:40 [ 167.303095] drm_fdin-1097 2d.s1. 165741077us : trace_ports: 0000:00:02.0 rcs0: submit { ccid:40 3:4660* prio 2147483646 } [ 167.303159] kworker/-89 11..... 165741139us : i915_request_retire.part.0: 0000:00:02.0 rcs0: fence c90:2, current 2 [ 167.303208] kworker/-89 11..... 165741148us : __intel_context_do_unpin

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.85-1 (bookworm)linux 6.1.85-1 (bookworm)
linuxlinux
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < 67944e6db656bf1e986aa2a359f866f851091f8a67944e6db656bf1e986aa2a359f866f851091f8a
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < fe34587acc995e7b1d7a5d3444a0736721ec32b3fe34587acc995e7b1d7a5d3444a0736721ec32b3
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < ac9b6b3e8d1237136c8ebf0fa1ce037dd7e2948fac9b6b3e8d1237136c8ebf0fa1ce037dd7e2948f
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < 7eab7b021835ae422c38b968d5cc60e99408fb627eab7b021835ae422c38b968d5cc60e99408fb62
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < 3b031e4fcb2740988143c303f81f69f18ce863253b031e4fcb2740988143c303f81f69f18ce86325
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < aed034866a08bb7e6e34d50a5629a4d23fe83703aed034866a08bb7e6e34d50a5629a4d23fe83703
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < 8fd9b0ce8c26533fe4d5d15ea15bbf7b904b611c8fd9b0ce8c26533fe4d5d15ea15bbf7b904b611c
linuxlinux>= 22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4 < 4a3859ea5240365d21f6053ee219bb240d5208954a3859ea5240365d21f6053ee219bb240d520895
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.216-15.10.216-1
linuxlinux_kernel>= 0 < 6.1.85-16.1.85-1
linuxlinux_kernel>= 0 < 6.7.12-16.7.12-1
linuxlinux_kernel>= 0 < 6.7.12-16.7.12-1
linuxlinux_kernel>= 0 < 5.4.0-189.2095.4.0-189.209
linuxlinux_kernel>= 0 < 5.15.0-116.1265.15.0-116.126
linuxlinux_kernel>= 0 < 6.8.0-35.356.8.0-35.35
linuxlinux_kernel>= 5.11 < 5.15.1545.15.154
linuxlinux_kernel>= 5.16 < 6.1.846.1.84
linuxlinux_kernel>= 5.4 < 5.4.2745.4.274
linuxlinux_kernel>= 5.5 < 5.10.2155.10.215
linuxlinux_kernel>= 6.2 < 6.6.246.6.24
linuxlinux_kernel>= 6.7 < 6.7.126.7.12

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.0HIGH
vendor_ubuntu7.0HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.