CVE-2024-49942

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Prevent null pointer access in xe_migrate_copy

xe_migrate_copy designed to copy content of TTM resources. When source

resource is null, it will trigger a NULL pointer dereference in

xe_migrate_copy. To avoid this situation, update lacks source flag to

true for this case, the flag will trigger xe_migrate_clear rather than

xe_migrate_copy.

Issue trace:

<7> [317.089847] xe 0000:00:02.0: [drm:xe_migrate_copy [xe]] Pass 14,

sizes: 4194304 & 4194304

<7> [317.089945] xe 0000:00:02.0: [drm:xe_migrate_copy [xe]] Pass 15,

sizes: 4194304 & 4194304

<1> [317.128055] BUG: kernel NULL pointer dereference, address:

0000000000000010

<1> [317.128064] #PF: supervisor read access in kernel mode

<1> [317.128066] #PF: error_code(0x0000) - not-present page

<6> [317.128069] PGD 0 P4D 0

<4> [317.128071] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI

<4> [317.128074] CPU: 1 UID: 0 PID: 1440 Comm: kunit_try_catch Tainted:

G U

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References