Vulnerability in Linux
CVE-2024-42260
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Validate passed in drm syncobj handles in the performance extension If userspace provides an unknown or invalid handle anywhere in the handle array the rest of the driver will not handle that well. Fix it by checking handle was looked up successfully or otherwise fail the extension by jumping into the existing unwind. (cherry picked from commit a546b7e4d73c23838d7e4d2c92882b3ca902d213)
EPSS: 0.002 (9.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions bae7cb5d68001a8d4ceec5964dda74bb9aab7220, 6.8, 0
- Linux Linux_kernel — versions 6.11
References
Frequently asked questions
- What is CVE-2024-42260?
- CVE-2024-42260 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-08-17.
- How severe is CVE-2024-42260?
- Medium severity. CVSS v3 base score is 5.5 out of 10.