CVE-2024-58086Improper Input Validation in Linux

Severity
5.5MEDIUMNVD
OSV8.8OSV7.8
EPSS
0.0%
top 93.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 6
Latest updateSep 3

Description

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor (`v3d->active_perfmon`) is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the `v3d->active_perfmon` pointer stale. This can lead to undefined behavior and instability. This patch ensures that the active perfmon is stopped before being destroyed, aligning with the behavior introduced

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

NVDlinux/linux_kernel5.155.15.179+4
Debianlinux/linux_kernel< 6.1.129-1+2
Ubuntulinux/linux_kernel< 5.15.0-140.150+1
CVEListV5linux/linux26a4dc29b74a137f45665089f6d3d633fcc9b66222e19c8c5f6b709f4ae40227392a30d57bac187d+6
debiandebian/linux< linux 6.1.129-1 (bookworm)

Patches

🔴Vulnerability Details

25
OSV
linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities2025-09-03
OSV
linux-gke, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilities2025-08-28
OSV
linux-raspi-realtime vulnerabilities2025-08-26
OSV
linux-oracle, linux-oracle-6.8 vulnerabilities2025-08-21
OSV
linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gkeop, linux-ibm, linux-ibm-6.8 vulnerabilities2025-08-20

📋Vendor Advisories

25
Ubuntu
Linux kernel (Azure) vulnerabilities2025-09-03
Ubuntu
Linux kernel vulnerabilities2025-08-28
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities2025-08-26
Ubuntu
Linux kernel (Oracle) vulnerabilities2025-08-21
Ubuntu
Linux kernel vulnerabilities2025-08-20