CVE-2024-42091
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Check pat.ops before dumping PAT settings We may leave pat.ops unset when running on brand new platform or when running as a VF.
Does this matter?
Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Check pat.ops before dumping PAT settings We may leave pat.ops unset when running on brand new platform or when running as a VF. While the former is unlikely, the latter is valid (future) use case and will cause NPD when someone will try to dump PAT settings by debugfs. It's better to check pointer to pat.ops instead of specific .dump hook, as we have this hook always defined for every .ops variant.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/583ce246c7ff9edeb0de49130cdc3d45db8545cbPatch
- https://git.kernel.org/stable/c/a918e771e6fbe1fa68932af5b0cdf473e23090ccPatch
- https://git.kernel.org/stable/c/583ce246c7ff9edeb0de49130cdc3d45db8545cbPatch
- https://git.kernel.org/stable/c/a918e771e6fbe1fa68932af5b0cdf473e23090ccPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.