Linux kernel IOMMU GPU buffer unmap causes memory corruption
CVE-2024-21471 Published on May 6, 2024

Use After Free in Graphics Linux
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

NVD

Vulnerability Analysis

CVE-2024-21471 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:

LOCAL

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2024-21471 has been classified to as a Dangling pointer vulnerability or weakness.

Products Associated with CVE-2024-21471

stack.watch emails you whenever new vulnerabilities are published in Google Android or Linux Kernel. Just hit a watch button to start following.

Google Android

Linux Kernel

Affected Versions

Qualcomm, Inc. Snapdragon:

Version AR8035 is affected.
Version C-V2X 9150 is affected.
Version CSRA6620 is affected.
Version CSRA6640 is affected.
Version FastConnect 6200 is affected.
Version FastConnect 6700 is affected.
Version FastConnect 6800 is affected.
Version FastConnect 6900 is affected.
Version FastConnect 7800 is affected.
Version Flight RB5 5G Platform is affected.
Version MDM9250 is affected.
Version MDM9628 is affected.
Version MDM9650 is affected.
Version QAM8255P is affected.
Version QAM8295P is affected.
Version QAM8650P is affected.
Version QAM8775P is affected.
Version QAMSRV1H is affected.
Version QAMSRV1M is affected.
Version QCA6174A is affected.
Version QCA6310 is affected.
Version QCA6320 is affected.
Version QCA6335 is affected.
Version QCA6391 is affected.
Version QCA6426 is affected.
Version QCA6436 is affected.
Version QCA6564A is affected.
Version QCA6564AU is affected.
Version QCA6574 is affected.
Version QCA6574A is affected.
Version QCA6574AU is affected.
Version QCA6595 is affected.
Version QCA6595AU is affected.
Version QCA6678AQ is affected.
Version QCA6696 is affected.
Version QCA6698AQ is affected.
Version QCA6797AQ is affected.
Version QCA8081 is affected.
Version QCA8337 is affected.
Version QCA9377 is affected.
Version QCM4325 is affected.
Version QCM4490 is affected.
Version QCM5430 is affected.
Version QCM6125 is affected.
Version QCM6490 is affected.
Version QCM8550 is affected.
Version QCN6024 is affected.
Version QCN9011 is affected.
Version QCN9012 is affected.
Version QCN9024 is affected.
Version QCS410 is affected.
Version QCS4490 is affected.
Version QCS5430 is affected.
Version QCS610 is affected.
Version QCS6125 is affected.
Version QCS6490 is affected.
Version QCS7230 is affected.
Version QCS8250 is affected.
Version QCS8550 is affected.
Version QRB5165M is affected.
Version QRB5165N is affected.
Version QSM8350 is affected.
Version Qualcomm 205 Mobile Platform is affected.
Version Qualcomm 215 Mobile Platform is affected.
Version Qualcomm Video Collaboration VC1 Platform is affected.
Version Qualcomm Video Collaboration VC3 Platform is affected.
Version Qualcomm Video Collaboration VC5 Platform is affected.
Version Robotics RB3 Platform is affected.
Version Robotics RB5 Platform is affected.
Version SA4150P is affected.
Version SA4155P is affected.
Version SA6145P is affected.
Version SA6150P is affected.
Version SA6155P is affected.
Version SA7255P is affected.
Version SA8145P is affected.
Version SA8150P is affected.
Version SA8155P is affected.
Version SA8195P is affected.
Version SA8255P is affected.
Version SA8295P is affected.
Version SA8530P is affected.
Version SA8540P is affected.
Version SA8620P is affected.
Version SA8650P is affected.
Version SA8770P is affected.
Version SA8775P is affected.
Version SA9000P is affected.
Version SD 8 Gen1 5G is affected.
Version SD660 is affected.
Version SD835 is affected.
Version SD865 5G is affected.
Version SD888 is affected.
Version SDX20M is affected.
Version SDX55 is affected.
Version SG4150P is affected.
Version SG8275P is affected.
Version SM6370 is affected.
Version SM7315 is affected.
Version SM7325P is affected.
Version SM8550P is affected.
Version Smart Audio 400 Platform is affected.
Version Snapdragon 210 Processor is affected.
Version Snapdragon 212 Mobile Platform is affected.
Version Snapdragon 4 Gen 1 Mobile Platform is affected.
Version Snapdragon 4 Gen 2 Mobile Platform is affected.
Version Snapdragon 480 5G Mobile Platform is affected.
Version Snapdragon 480+ 5G Mobile Platform (SM4350-AC) is affected.
Version Snapdragon 660 Mobile Platform is affected.
Version Snapdragon 680 4G Mobile Platform is affected.
Version Snapdragon 685 4G Mobile Platform (SM6225-AD) is affected.
Version Snapdragon 695 5G Mobile Platform is affected.
Version Snapdragon 778G 5G Mobile Platform is affected.
Version Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) is affected.
Version Snapdragon 780G 5G Mobile Platform is affected.
Version Snapdragon 782G Mobile Platform (SM7325-AF) is affected.
Version Snapdragon 7c+ Gen 3 Compute is affected.
Version Snapdragon 8 Gen 1 Mobile Platform is affected.
Version Snapdragon 8 Gen 2 Mobile Platform is affected.
Version Snapdragon 8 Gen 3 Mobile Platform is affected.
Version Snapdragon 8+ Gen 1 Mobile Platform is affected.
Version Snapdragon 8+ Gen 2 Mobile Platform is affected.
Version Snapdragon 820 Automotive Platform is affected.
Version Snapdragon 835 Mobile PC Platform is affected.
Version Snapdragon 845 Mobile Platform is affected.
Version Snapdragon 865 5G Mobile Platform is affected.
Version Snapdragon 865+ 5G Mobile Platform (SM8250-AB) is affected.
Version Snapdragon 870 5G Mobile Platform (SM8250-AC) is affected.
Version Snapdragon 888 5G Mobile Platform is affected.
Version Snapdragon 888+ 5G Mobile Platform (SM8350-AC) is affected.
Version Snapdragon AR2 Gen 1 Platform is affected.
Version Snapdragon Auto 5G Modem-RF is affected.
Version Snapdragon W5+ Gen 1 Wearable Platform is affected.
Version Snapdragon X12 LTE Modem is affected.
Version Snapdragon X20 LTE Modem is affected.
Version Snapdragon X65 5G Modem-RF System is affected.
Version Snapdragon XR1 Platform is affected.
Version Snapdragon XR2 5G Platform is affected.
Version SRV1H is affected.
Version SRV1M is affected.
Version SSG2115P is affected.
Version SSG2125P is affected.
Version SW5100 is affected.
Version SW5100P is affected.
Version SXR1120 is affected.
Version SXR1230P is affected.
Version SXR2230P is affected.
Version SXR2250P is affected.
Version TalynPlus is affected.
Version WCD9326 is affected.
Version WCD9335 is affected.
Version WCD9340 is affected.
Version WCD9341 is affected.
Version WCD9370 is affected.
Version WCD9375 is affected.
Version WCD9380 is affected.
Version WCD9385 is affected.
Version WCD9390 is affected.
Version WCD9395 is affected.
Version WCN3610 is affected.
Version WCN3660B is affected.
Version WCN3680B is affected.
Version WCN3950 is affected.
Version WCN3980 is affected.
Version WCN3988 is affected.
Version WCN3990 is affected.
Version WCN6740 is affected.
Version WSA8810 is affected.
Version WSA8815 is affected.
Version WSA8830 is affected.
Version WSA8832 is affected.
Version WSA8835 is affected.
Version WSA8840 is affected.
Version WSA8845 is affected.
Version WSA8845H is affected.

qualcomm ar8035_firmware:

Before * is affected.

qualcomm c-v2x_9150_firmware:

Before * is affected.

qualcomm csra6640_firmware:

Before * is affected.

qualcomm fastconnect_6200_firmware:

Before * is affected.

qualcomm fastconnect_6800_firmware:

Before * is affected.

qualcomm fastconnect_6900_firmware:

Before * is affected.

qualcomm flight_rb5_5g_platform_firmware:

Before * is affected.

qualcomm mdm9250_firmware:

Before * is affected.

qualcomm mdm9650_firmware:

Before * is affected.

qualcomm qam8255p_firmware:

Before * is affected.

qualcomm qam8775p_firmware:

Before * is affected.

qualcomm qamsrv1h_firmware:

Before * is affected.

qualcomm qca6174a_firmware:

Before * is affected.

qualcomm qca6310_firmware:

Before * is affected.

qualcomm qca6335_firmware:

Before * is affected.

qualcomm qca6391_firmware:

Before * is affected.

qualcomm qca6436_firmware:

Before * is affected.

qualcomm qca6564a_firmware:

Before * is affected.

qualcomm qca6574_firmware:

Before * is affected.

qualcomm qca6574a_firmware:

Before * is affected.

qualcomm qca6595_firmware:

Before * is affected.

qualcomm qca6595au_firmware:

Before * is affected.

qualcomm qca6696_firmware:

Before * is affected.

qualcomm qca6698aq_firmware:

Before * is affected.

qualcomm qca8081_firmware:

Before * is affected.

qualcomm qca8337_firmware:

Before * is affected.

qualcomm qcm4325_firmware:

Before * is affected.

qualcomm qcm4490_firmware:

Before * is affected.

qualcomm qcm6125_firmware:

Before * is affected.

qualcomm qcm6490_firmware:

Before * is affected.

qualcomm qcn6024_firmware:

Before * is affected.

qualcomm qcn9011_firmware:

Before * is affected.

qualcomm qcn9024_firmware:

Before * is affected.

qualcomm qcs410_firmware:

Before * is affected.

qualcomm qcs5430_firmware:

Before * is affected.

qualcomm qcs610_firmware:

Before * is affected.

qualcomm qcs6125_firmware:

Before * is affected.

qualcomm qcs6490_firmware:

Before * is affected.

qualcomm qcs7230_firmware:

Before * is affected.

qualcomm qcs8250_firmware:

Before * is affected.

qualcomm qcs8550_firmware:

Before * is affected.

qualcomm qrb5165n_firmware:

Before * is affected.

qualcomm qsm8350_firmware:

Before * is affected.

qualcomm_215_mobile_platform_firmware:

Before * is affected.

qualcomm_video_collaboration_vc1_platform_firmware:

Before * is affected.

qualcomm_video_collaboration_vc5_platform_firmware:

Before * is affected.

qualcomm robotics_rb5_platform_firmware:

Before * is affected.

qualcomm sa4150p_firmware:

Before * is affected.

qualcomm sa6145p_firmware:

Before * is affected.

qualcomm sa6150p_firmware:

Before * is affected.

qualcomm csra6620_firmware:

Before * is affected.

qualcomm fastconnect_6700_firmware:

Before * is affected.

qualcomm fastconnect_7800_firmware:

Before * is affected.

qualcomm mdm9628_firmware:

Before * is affected.

qualcomm qam8295p_firmware:

Before * is affected.

qualcomm qam8650p_firmware:

Before * is affected.

qualcomm qamsrv1m_firmware:

Before * is affected.

qualcomm qca6320_firmware:

Before * is affected.

qualcomm qca6426_firmware:

Before * is affected.

qualcomm qca6564au_firmware:

Before * is affected.

qualcomm qca6574au_firmware:

Before * is affected.

qualcomm qca6678aq_firmware:

Before * is affected.

qualcomm qca6797aq_firmware:

Before * is affected.

qualcomm qca9377_firmware:

Before * is affected.

qualcomm qcm5430_firmware:

Before * is affected.

qualcomm qcm8550_firmware:

Before * is affected.

qualcomm qcn9012_firmware:

Before * is affected.

qualcomm qcs4490_firmware:

Before * is affected.

qualcomm qrb5165m_firmware:

Before * is affected.

qualcomm_205_mobile_platform_firmware:

Before * is affected.

qualcomm_video_collaboration_vc3_platform_firmware:

Before * is affected.

qualcomm robotics_rb3_platform_firmware:

Before * is affected.

qualcomm sa4155p_firmware:

Before * is affected.

qualcomm sa6155p_firmware:

Before * is affected.

Exploit Probability

EPSS

0.11%

Percentile

29.62%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

Linux kernel IOMMU GPU buffer unmap causes memory corruptionCVE-2024-21471 Published on May 6, 2024

Vulnerability Analysis

Weakness Type

What is a Dangling pointer Vulnerability?

Products Associated with CVE-2024-21471

Affected Versions

Exploit Probability

Linux kernel IOMMU GPU buffer unmap causes memory corruption
CVE-2024-21471 Published on May 6, 2024