Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Prevent unmapping active read buffers The kms paths keep a persistent map active to read and compare the cursor buffer. These maps can race with each other in simple scenario where: a) buffer "a" mapped for update b) buffer "a" mapped for compare c) do the compare d) unmap "a" for compare e) update the cursor f) unmap "a" for update At step "e" the buffer has been unmapped and the read contents is bogus. Prevent unmapping of active read buffers by simply keeping a count of how many paths have currently active maps and unmap only when the count reaches 0.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.19, < 6.10.8 |
References
- https://git.kernel.org/stable/c/0851b1ec650adadcaa23ec96daad95a55bf966f0
- https://git.kernel.org/stable/c/58a3714db4d9dcaeb9fc4905141e17b9f536c0a5
- https://git.kernel.org/stable/c/aba07b9a0587f50e5d3346eaa19019cf3f86c0eaPatch
- https://git.kernel.org/stable/c/d5228d158e4c0b1663b3983044913c15c3d0135ePatch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
FAQ
What is CVE-2024-46710?
CVE-2024-46710 is a vulnerability with a CVSS score of 4.7 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Prevent unmapping active read buffers The kms paths keep a persistent map active to read and compare the cursor buffer...
How severe is CVE-2024-46710?
CVE-2024-46710 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-46710?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.