drm/i915/gt: Reset queue_priority_hint on parking
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with strict in order execution, we could complete execution only when the queue was empty. Preempt-to-busy allows replacement of an active request that may complete before the preemption is processed by HW. If that happens, the request is retired from the queue, but the queue_priority_hint remains set, preventing direct submission until after the next CS interrupt is processed. This preempt-to-busy race can be triggered by the heartbeat, which will also act as the power-management barrier and upon completion allow us to idle the HW. We may process the completion of the heartbeat, and begin parking the engine before the CS event that restores the queue_priority_hint, causing us to fail the assertion that it is MIN. <3>[ 166.210729] __engine_park:283 GEM_BUG_ON(engine->sched_engine->queue_priority_hint != (-((int)(~0U >> 1)) - 1)) <0>[ 166.210781] Dumping ftrace buffer: <0>[ 166.210795] --------------------------------- ... <0>[ 167.302811] drm_fdin-1097 2..s1. 165741070us : trace_ports: 0000:00:02.0 rcs0: promote { ccid:20 1217:2 prio 0 } <0>[ 167.302861] drm_fdin-1097 2d.s2. 165741072us : execlists_submission_tasklet: 0000:00:02.0 rcs0: preempting last=1217:2, prio=0, hint=2147483646 <0>[ 167.302928] drm_fdin-1097 2d.s2. 165741072us : __i915_request_unsubmit: 0000:00:02.0 rcs0: fence 1217:2, current 0 <0>[ 167.302992] drm_fdin-1097 2d.s2. 165741073
CVE-2024-26937
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-26937
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "67944e6db656bf1e986aa2a359f866f851091f8a",
"versionType": "git"
},
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "fe34587acc995e7b1d7a5d3444a0736721ec32b3",
"versionType": "git"
},
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "ac9b6b3e8d1237136c8ebf0fa1ce037dd7e2948f",
"versionType": "git"
},
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "7eab7b021835ae422c38b968d5cc60e99408fb62",
"versionType": "git"
},
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "3b031e4fcb2740988143c303f81f69f18ce86325",
"versionType": "git"
},
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "aed034866a08bb7e6e34d50a5629a4d23fe83703",
"versionType": "git"
},
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "8fd9b0ce8c26533fe4d5d15ea15bbf7b904b611c",
"versionType": "git"
},
{
"status": "affected",
"version": "22b7a426bbe1ebe1520f92da4cd1617d1e1b5fc4",
"lessThan": "4a3859ea5240365d21f6053ee219bb240d520895",
"versionType": "git"
}
],
"programFiles": [
"drivers/gpu/drm/i915/gt/intel_engine_pm.c",
"drivers/gpu/drm/i915/gt/intel_execlists_submission.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.4"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.4",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.4.274",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.215",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.154",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.84",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.24",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.7.12",
"versionType": "semver",
"lessThanOrEqual": "6.7.*"
},
{
"status": "unaffected",
"version": "6.8.3",
"versionType": "semver",
"lessThanOrEqual": "6.8.*"
},
{
"status": "unaffected",
"version": "6.9",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/gpu/drm/i915/gt/intel_engine_pm.c",
"drivers/gpu/drm/i915/gt/intel_execlists_submission.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-26937
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #26463 · Revision 1
- Added to Heist Feed
- Publisher date