CVE-2024-41092

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gt: Fix potential UAF by revoke of fence registers

CI has been sporadically reporting the following issue triggered by

igt@i915_selftest@live@hangcheck on ADL-P and similar machines:

<6> [414.049203] i915: Running intel_hangcheck_live_selftests/igt_reset_evict_fence

...

<6> [414.068804] i915 0000:00:02.0: [drm] GT0: GUC: submission enabled

<6> [414.068812] i915 0000:00:02.0: [drm] GT0: GUC: SLPC enabled

<3> [414.070354] Unable to pin Y-tiled fence; err:-4

<3> [414.071282] i915_vma_revoke_fence:301 GEM_BUG_ON(!i915_active_is_idle(&fence->active))

...

<4>[ 609.603992] ------------[ cut here ]------------

<2>[ 609.603995] kernel BUG at drivers/gpu/drm/i915/gt/intel_ggtt_fencing.c:301!

<4>[ 609.604003] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI

<4>[ 609.604006] CPU: 0 PID: 268 Comm: kworker/u64:3 Tainted: G U W 6.9.0-CI_DRM_14785-g1ba62f8cea9c+ #1

<4>[ 609.604008] Hardware name: Intel Corpor

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References