← All advisories

High severity7.8NVD Advisory· Published Nov 25, 2024· Updated Jun 17, 2026

CVE-2024-53098

CVE-2024-53098

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/ufence: Prefetch ufence addr to catch bogus address

access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace.

(cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)

Affected products

16

Linux/Kernel7 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <6.11.9
- cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 6.8
osv-coords9 versions
pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:linux/kernel
< 6.11.0-1009.10+ 8 more
- (no CPE)range: < 6.11.0-1009.10
- (no CPE)range: < 6.11.0-1009.9
- (no CPE)range: < 6.11.0-1009.9
- (no CPE)range: < 6.11.0-1010.11
- (no CPE)range: < 6.11.0-1011.12
- (no CPE)range: < 6.11.0-1008.8
- (no CPE)range: < 6.11.0-1005.5
- (no CPE)range: < 6.11.0-18.18
- (no CPE)range: >= 6.8.0, < 6.11.9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.