CVE-2024-46699

published 2024-09-13

CVE-2024-46699: In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable preemption while updating GPU stats We forgot to disable preemption around…

Priority P3 36 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Disable preemption while updating GPU stats

We forgot to disable preemption around the write_seqcount_begin/end() pair
while updating GPU stats:

[ ] WARNING: CPU: 2 PID: 12 at include/linux/seqlock.h:221 __seqprop_assert.isra.0+0x128/0x150 [v3d]
[ ] Workqueue: v3d_bin drm_sched_run_job_work [gpu_sched]

[ ] Call trace:
[ ] __seqprop_assert.isra.0+0x128/0x150 [v3d]
[ ] v3d_job_start_stats.isra.0+0x90/0x218 [v3d]
[ ] v3d_bin_job_run+0x23c/0x388 [v3d]
[ ] drm_sched_run_job_work+0x520/0x6d0 [gpu_sched]
[ ] process_one_work+0x62c/0xb48
[ ] worker_thread+0x468/0x5b0
[ ] kthread+0x1c4/0x1e0
[ ] ret_from_fork+0x10/0x20

Fix it.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.10.9-1 (forky)	linux 6.10.9-1 (forky)
linux	linux	—	—
linux	linux	>= 6abe93b621ab12e93cf0eb7e42a609b36be32da1 < 1e93467ef20308da5a94cde548ee17d523e8ba7b	1e93467ef20308da5a94cde548ee17d523e8ba7b
linux	linux	>= 6abe93b621ab12e93cf0eb7e42a609b36be32da1 < 9d824c7fce58f59982228aa85b0376b113cdfa35	9d824c7fce58f59982228aa85b0376b113cdfa35
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.10.9-1	6.10.9-1
linux	linux_kernel	>= 0 < 6.10.9-1	6.10.9-1
linux	linux_kernel	>= 6.10 < 6.10.8	6.10.8

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.8 HIGH

vendor_debian 7.8 LOW

vendor_redhat 7.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-99