CVE-2024-58091

A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) framebuffer DMA driver. In configurations using deferred input/output (I/O), Direct Memory Access (DMA) memory buffers are not reliably backed by physical memory page structures. A local user could trigger this flaw during display operations, resulting in a NULL pointer dereference that causes a system crash and Denial of Service (DoS).

This vulnerability is rated as having Low severity because triggering it requires local access on systems operating hardware configurations that utilize deferred I/O with DRM fbdev DMA buffers, and the resultant impact is limited to a system crash (denial of service). The issue is absent from Red Hat Enterprise Linux 8 and 9 where the vulnerable implementation was not present. Typical enterprise server deployments do not rely on the specific display adapters and deferred framebuffer DMA modes necessary to expose this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.