github - ghsa-w6jp-r2wp-jmpx

ghsa-w6jp-r2wp-jmpx

Vulnerability from github

Published

2024-05-20 12:30

Modified

2024-06-10 18:31

Details

In the Linux kernel, the following vulnerability has been resolved:

drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()

Subject: [PATCH] drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()

If some the pages or sgt allocation failed, we shouldn't release the pages ref we got earlier, otherwise we will end up with unbalanced get/put_pages() calls. We should instead leave everything in place and let the BO release function deal with extra cleanup when the object is destroyed, or let the fault handler try again next time it's called.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-35951",
   ],
   database_specific: {
      cwe_ids: [],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-05-20T10:15:10Z",
      severity: null,
   },
   details: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()\n\nSubject: [PATCH] drm/panfrost: Fix the error path in\n panfrost_mmu_map_fault_addr()\n\nIf some the pages or sgt allocation failed, we shouldn't release the\npages ref we got earlier, otherwise we will end up with unbalanced\nget/put_pages() calls. We should instead leave everything in place\nand let the BO release function deal with extra cleanup when the object\nis destroyed, or let the fault handler try again next time it's called.",
   id: "GHSA-w6jp-r2wp-jmpx",
   modified: "2024-06-10T18:31:03Z",
   published: "2024-05-20T12:30:27Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-35951",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa",
      },
      {
         type: "WEB",
         url: "http://www.openwall.com/lists/oss-security/2024/05/30/1",
      },
      {
         type: "WEB",
         url: "http://www.openwall.com/lists/oss-security/2024/05/30/2",
      },
   ],
   schema_version: "1.4.0",
   severity: [],
}

cve-2024-35951

Vulnerability from cvelistv5

Published

2024-05-20 09:41

Modified

2024-12-19 08:58

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() Subject: [PATCH] drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() If some the pages or sgt allocation failed, we shouldn't release the pages ref we got earlier, otherwise we will end up with unbalanced get/put_pages() calls. We should instead leave everything in place and let the BO release function deal with extra cleanup when the object is destroyed, or let the fault handler try again next time it's called.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002
	https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa
	https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3

Impacted products

Vendor

Product

Version

▼

Linux

Version: 187d2929206e6b098312c174ea873e4cedf5420d
Version: 187d2929206e6b098312c174ea873e4cedf5420d
Version: 187d2929206e6b098312c174ea873e4cedf5420d

Linux

Version: 5.4

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-35951",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-05-23T19:20:08.650498Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-04T17:33:35.617Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T03:21:48.983Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/05/30/2",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/05/30/1",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "drivers/gpu/drm/panfrost/panfrost_mmu.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "31806711e8a4b75e09b1c43652f2a6420e6e1002",
                     status: "affected",
                     version: "187d2929206e6b098312c174ea873e4cedf5420d",
                     versionType: "git",
                  },
                  {
                     lessThan: "e18070c622c63f0cab170348e320454728c277aa",
                     status: "affected",
                     version: "187d2929206e6b098312c174ea873e4cedf5420d",
                     versionType: "git",
                  },
                  {
                     lessThan: "1fc9af813b25e146d3607669247d0f970f5a87c3",
                     status: "affected",
                     version: "187d2929206e6b098312c174ea873e4cedf5420d",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "drivers/gpu/drm/panfrost/panfrost_mmu.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "5.4",
                  },
                  {
                     lessThan: "5.4",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.6.*",
                     status: "unaffected",
                     version: "6.6.28",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.8.*",
                     status: "unaffected",
                     version: "6.8.7",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.9",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()\n\nSubject: [PATCH] drm/panfrost: Fix the error path in\n panfrost_mmu_map_fault_addr()\n\nIf some the pages or sgt allocation failed, we shouldn't release the\npages ref we got earlier, otherwise we will end up with unbalanced\nget/put_pages() calls. We should instead leave everything in place\nand let the BO release function deal with extra cleanup when the object\nis destroyed, or let the fault handler try again next time it's called.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T08:58:56.203Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/31806711e8a4b75e09b1c43652f2a6420e6e1002",
            },
            {
               url: "https://git.kernel.org/stable/c/e18070c622c63f0cab170348e320454728c277aa",
            },
            {
               url: "https://git.kernel.org/stable/c/1fc9af813b25e146d3607669247d0f970f5a87c3",
            },
         ],
         title: "drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-35951",
      datePublished: "2024-05-20T09:41:45.999Z",
      dateReserved: "2024-05-17T13:50:33.135Z",
      dateUpdated: "2024-12-19T08:58:56.203Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted