CVE Database›Document archive›CVE-2024-50030

CVE-2024-50030

kernel: drm/xe/ct: prevent UAF in send_recv()

Loading…

Severity

Moderate

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 21, 2024

Updated · September 14, 2026

Description

A flaw was found in the Linux kernel. A use-after-free (UAF) vulnerability, which occurs when a program attempts to use memory after it has been freed, exists in the drm/xe/ct component's send_recv() function. This issue arises from inadequate serialization and missing memory barriers, causing a fence object to be used after it has been deallocated. A local attacker with low privileges could exploit this flaw to potentially gain unauthorized access to sensitive information, elevate their privileges, or trigger a system crash (denial of service).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 · Use After Free