CVE Database›Document archive›CVE-2024-42066

CVE-2024-42066

kernel: drm/xe: Fix potential integer overflow in page size calculation

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · July 29, 2024

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's Intel Xe graphics driver (drm/xe). A local user could exploit this flaw to cause a Denial of Service (DoS) due to an integer overflow during page size calculations. Because page alignment values are bit-shifted without adequate 64-bit type conversion, incorrect memory sizing can lead to memory allocation errors and system instability.

Statement

This vulnerability is rated as Low severity because exploitation requires local system access and specific Intel graphics hardware, restricting the blast radius strictly to a local denial of service without compromising system confidentiality or integrity. Supported Red Hat Enterprise Linux releases are not affected by this flaw because the Intel Xe driver was introduced in newer upstream kernel releases and is absent from standard enterprise kernels. Consequently, typical enterprise environments are not exposed to this issue.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')