Vulnerability in Linux

CVE-2024-58086

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance monitor (`v3d->active_perfmon`) is being destroyed, stop it first. Currently, the active perfmon is not stopped during destruction, leaving the `v3d->active_perfmon` pointer stale. This can lead to undefined behavior and instability. This patch ensures that the active perfmon is stopped before being destroyed, aligning with the behavior introduced in commit 7d1fd3638ee3 ("drm/v3d: Stop the active perfmon before being destroyed").

EPSS: 0.002 (6.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2024-58086?
CVE-2024-58086 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-03-06.
How severe is CVE-2024-58086?
High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2024-58086 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.