#VU94938 Use-after-free in Linux kernel - CVE-2024-41092

Vulnerability identifier: #VU94938

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41092

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the i915_vma_revoke_fence() function in drivers/gpu/drm/i915/gt/intel_ggtt_fencing.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/f771b91f21c46ad1217328d05e72a2c7e3add535
https://git.kernel.org/stable/c/29c0fdf49078ab161570d3d1c6e13d66f182717d
https://git.kernel.org/stable/c/ca0fabd365a27a94a36e68a7a02df8ff3c13dac6
https://git.kernel.org/stable/c/06dec31a0a5112a91f49085e8a8fa1a82296d5c7
https://git.kernel.org/stable/c/414f4a31f7a811008fd9a33b06216b060bad18fc
https://git.kernel.org/stable/c/996c3412a06578e9d779a16b9e79ace18125ab50

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.