CVE-2024-43867
drm/nouveau: prime: fix refcount underflow
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling nouveau_bo_ref() on a nouveau_bo without initializing it (and hence the backing ttm_bo) leads to a refcount underflow. Instead of calling nouveau_bo_ref() in the unwind path of drm_gem_object_init(), clean things up manually. (cherry picked from commit 1b93f3e89d03cfc576636e195466a0d728ad8de5)
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.9
References 7
git.kernel.org
- stable/c/3bcb8bba72ce89667fa863054956267c450c47ef
- stable/c/906372e753c5027a1dc88743843b6aa2ad1aaecf
- stable/c/16998763c62bb465ebc409d0373b9cdcef1a61a6
- stable/c/ebebba4d357b6c67f96776a48ddbaf0060fa4c10
- stable/c/f23cd66933fe76b84d8e282e5606b4d99068c320
- stable/c/2a1b327d57a8ac080977633a18999f032d7e9e3f
- stable/c/a9bf3efc33f1fbf88787a277f7349459283c9b95