CVE-2024-53098: drm/xe/ufence: Prefetch ufence addr to catch bogus address

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-11-25 · updated 2026-06-17
Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/ufence: Prefetch ufence addr to catch bogus address access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace. (cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)

Affected products

Linux kernel: before 6.11.9; 6.12-rc1, 6.12-rc2, 6.12-rc3, 6.12-rc4 — fixed in 6.11.9

How to fix

Upgrade to a fixed version: Linux kernel 6.11.9. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/5d623ffbae96b23f1fc43a3d5a267aabdb07583d
https://git.kernel.org/stable/c/9c1813b3253480b30604c680026c7dc721ce86d1

Get alerted when CVE-2024-53098 or the next vulnerability affects your stack