CVE-2024-58086
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Linux kernel, a vulnerability in the DRM V3D driver occurs when an active performance monitor (perfmon) is destroyed without being stopped, leaving the `v3d->active_perfmon` pointer stale. This can lead to undefined behavior and system instability.
Risk Assessment
The risk includes potential system destabilization or unpredictable behavior when using performance monitoring in the V3D graphics driver, potentially affecting system availability and integrity.
Recommendation
It is recommended to immediately update the Linux kernel to a version containing the fix (commit 7d1fd3638ee3 or later), which ensures the active performance monitor is stopped before being destroyed.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor (`v3d->active_perfmon`) is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the `v3d->active_perfmon` pointer stale. This can lead to undefined behavior and instability. This patch ensures that the active perfmon is stopped before being destroyed, aligning with the behavior introduced in commit 7d1fd3638ee3 ("drm/v3d: Stop the active perfmon before being destroyed").