CVE-2024-58086

drm/v3d: Stop active perfmon if it is being destroyed

Description

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor (`v3d->active_perfmon`) is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the `v3d->active_perfmon` pointer stale. This can lead to undefined behavior and instability. This patch ensures that the active perfmon is stopped before being destroyed, aligning with the behavior introduced in commit 7d1fd3638ee3 ("drm/v3d: Stop the active perfmon before being destroyed").

N/A

CVSS

Severity:

EPSS 0.07%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/22e19c8c5f6b709f4ae40227392a30d57bac187d
https://git.kernel.org/stable/c/95036d4c01167568166108d42c2b0e9f8dbd7d2b
https://git.kernel.org/stable/c/eb0e0eca0eab93f310c6c37b8564049366704691
https://git.kernel.org/stable/c/1c5673a2c8926adbb61f340c779b28e18188a8cd
https://git.kernel.org/stable/c/f8805b12f477bd964e2820a87921c7b58cc2dee3
https://git.kernel.org/stable/c/21f1435b1e6b012a07c42f36b206d2b66fc8f13b

Frequently Asked Questions

What is the severity of CVE-2024-58086?: CVE-2024-58086 has not yet been assigned a CVSS score.
How to fix CVE-2024-58086?: To fix CVE-2024-58086, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-58086 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-58086 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-58086?: CVE-2024-58086 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.