CVE-2024-58086

In the Linux kernel, the following vulnerability has been resolved:

drm/v3d: Stop active perfmon if it is being destroyed

If the active performance monitor (v3d->active_perfmon) is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the v3d->active_perfmon pointer stale. This can lead to undefined behavior and instability.

This patch ensures that the active perfmon is stopped before being destroyed, aligning with the behavior introduced in commit 7d1fd3638ee3 ("drm/v3d: Stop the active perfmon before being destroyed").

A low-impact flaw was found in the Linux kernel Broadcom V3D DRM graphics driver. When an active performance monitor (v3d->active_perfmon) was destroyed without first being stopped, a stale pointer to the destroyed performance monitor remained, which could lead to undefined behavior and system instability. Exploiting this flaw requires local access to a system with Broadcom V3D graphics hardware and the ability to use the driver's performance-monitor interface, and successful exploitation would primarily affect system availability. None of Red Hat's products are affected by this flaw: the vulnerable code is not present in the Linux kernel packages shipped with Red Hat Enterprise Linux 6 through 10 (including the kernel-rt real-time kernel) or Red Hat In-Vehicle OS 1. The upstream CVE.org record scores this flaw as 7.8 (Important) with high confidentiality and integrity impact, which is higher than Red Hat's CVSS 3.1 score of 4.4 (Moderate, availability impact only); Red Hat's scoring reflects that the verified consequence of the stale pointer is undefined behavior and instability, with no demonstrated confidentiality or integrity impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.