In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: Stop the active perfmon before being destroyed
Upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed in `vc4_perfmon_close_file()`, the active performance monitor's pointer (`vc4->active_perfmon`) is still retained.
If we open a new file descriptor and submit a few jobs with performance monitors, the driver will attempt to stop the active performance monitor using the stale pointer in `vc4->active_perfmon`. However, this pointer is no longer valid because the previous process has already terminated, and all performance monitors associated with it have been destroyed and freed.
To fix this, when the active performance monitor belongs to a given process, explicitly stop it before destroying and freeing it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-kvmUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-azureUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64k | Feb 20, 2025 | Nov 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub