CVE-2024-46709: drm/vmwgfx: Fix prime with external buffers

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-13 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix prime with external buffers Make sure that for external buffers mapping goes through the dma_buf interface instead of trying to access pages directly. External buffers might not provide direct access to readable/writable pages so to make sure the bo's created from external dma_bufs can be read dma_buf interface has to be used. Fixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't trigger this due to the fact that virtual machines will not have multiple GPUs but it enables better test coverage in IGT.

Affected products

Linux kernel: from 6.6.29 before 6.6.49; from 6.8.8 before 6.9; from 6.9 before 6.10.8; 6.11-rc1, 6.11-rc2, 6.11-rc3, 6.11-rc4, 6.11-rc5 — fixed in 6.10.8, 6.6.49, 6.9

How to fix

Upgrade to a fixed version: Linux kernel 6.10.8, 6.6.49, 6.9. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-46709 or the next vulnerability affects your stack