{"schema_version":"1.9.0","id":"CVE-2024-40924","published":"2024-07-12T12:25:04.991Z","modified":"2026-08-12T03:51:41.107702211Z","related":["ALSA-2024:8856","ALSA-2024:8870","SUSE-SU-2024:2894-1","SUSE-SU-2024:2939-1","SUSE-SU-2024:2947-1","SUSE-SU-2024:3194-1","SUSE-SU-2024:3195-1","SUSE-SU-2024:3383-1","SUSE-SU-2025:20044-1","SUSE-SU-2025:20047-1"],"summary":"drm/i915/dpt: Make DPT object unshrinkable","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/dpt: Make DPT object unshrinkable\n\nIn some scenarios, the DPT object gets shrunk but\nthe actual framebuffer did not and thus its still\nthere on the DPT's vm->bound_list. Then it tries to\nrewrite the PTEs via a stale CPU mapping. This causes panic.\n\n[vsyrjala: Add TODO comment]\n(cherry picked from commit 51064d471c53dcc8eddd2333c3f1c1d9131ba36c)","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0dc987b699ce4266450d407d6d79d41eab88c5d0"},{"fixed":"327280149066f0e5f2e50356b5823f76dabfe86e"},{"fixed":"7a9883be3b98673333eec65c4a21cc18e60292eb"},{"fixed":"a2552020fb714ff357182c3c179abfac2289f84d"},{"fixed":"43e2b37e2ab660c3565d4cff27922bc70e79c3f1"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-40924.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.1.95"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.35"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.9.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-40924.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/327280149066f0e5f2e50356b5823f76dabfe86e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/43e2b37e2ab660c3565d4cff27922bc70e79c3f1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7a9883be3b98673333eec65c4a21cc18e60292eb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a2552020fb714ff357182c3c179abfac2289f84d"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40924.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40924"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40924.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}