CVE-2024-42066
kernel: drm/xe: Fix potential integer overflow in page size calculation
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 29, 2024
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Intel Xe graphics driver (drm/xe). A local user could exploit this flaw to cause a Denial of Service (DoS) due to an integer overflow during page size calculations. Because page alignment values are bit-shifted without adequate 64-bit type conversion, incorrect memory sizing can lead to memory allocation errors and system instability.
Statement
This vulnerability is rated as Low severity because exploitation requires local system access and specific Intel graphics hardware, restricting the blast radius strictly to a local denial of service without compromising system confidentiality or integrity. Supported Red Hat Enterprise Linux releases are not affected by this flaw because the Intel Xe driver was introduced in newer upstream kernel releases and is absent from standard enterprise kernels. Consequently, typical enterprise environments are not exposed to this issue.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')