CVE-2024-42081: drm/xe/xe_devcoredump: Check NULL before assignments

CVE-2024-42081 PUBLISHED

drm/xe/xe_devcoredump: Check NULL before assignments

Reported by linux · Published July 29, 2024

In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_devcoredump: Check NULL before assignments Assign 'xe_devcoredump_snapshot *' and 'xe_device *' only if 'coredump' is not NULL. v2 - Fix commit messages. v3 - Define variables before code.(Ashutosh/Jose) v4 - Drop return check for coredump_to_xe. (Jose/Rodrigo) v5 - Modify misleading commit message. (Matt)

Affected products

Vendor	Product	Versions
Linux	Linux	dd08ebf6c3525a7ea2186e636df064ea47281987, dd08ebf6c3525a7ea2186e636df064ea47281987
Linux	Linux	6.8, 0, 6.9.8
linux	linux_kernel	6.8, 6.8
Linux	Linux	, , 6.8

Timeline

Jul 29, 2024 CVE Published
Jul 29, 2024 PoC Published
Jul 30, 2024 EPSS Score (30 in total, the first dated here)
Oct 4, 2024 Coalition ESS Score (8 in total, the first dated here)
Jan 7, 2026 Security Advisory (340 in total, the first dated here)
May 11, 2026 CVE Updated
Sep 22, 2026 Distribution Patch (222 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-42081
vulnetix vdb fixes CVE-2024-42081

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-42081/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →