Skip to content
Heist/ feed
Back to feed
HighFix available

drm/xe: reset mmio mappings with devm

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: drm/xe: reset mmio mappings with devm Set our various mmio mappings to NULL. This should make it easier to catch something rogue trying to mess with mmio after device removal. For example, we might unmap everything and then start hitting some mmio address which has already been unmamped by us and then remapped by something else, causing all kinds of carnage.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.10.7
CVEs
CVE-2024-46705
Confirmed fixed CVEs
Not specified
Updated in this feed
4 Nov 2026, 19:01 UTC · Revision 1

Source evidence

drm/xe: reset mmio mappings with devm

core-osv · Original source

Published 13 Sept 2024, 06:27 UTC

In the Linux kernel, the following vulnerability has been resolved: drm/xe: reset mmio mappings with devm Set our various mmio mappings to NULL. This should make it easier to catch something rogue trying to mess with mmio after device removal. For example, we might unmap everything and then start hitting some mmio address which has already been unmamped by us and then remapped by something else, causing all kinds of carnage.

osv:CVE-2024-46705

Kernel

Fixed versions: 6.10.7

Complete source record
{
  "id": "4abaf54526eb029d25831ad7a4c0abd5fcf614481202c4e97b94d193cd12e2c6",
  "url": "https://osv.dev/vulnerability/CVE-2024-46705",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "drm/xe: reset mmio mappings with devm",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: drm/xe: reset mmio mappings with devm Set our various mmio mappings to NULL. This should make it easier to catch something rogue trying to mess with mmio after device removal. For example, we might unmap everything and then start hitting some mmio address which has already been unmamped by us and then remapped by something else, causing all kinds of carnage.",
    "evidence": "osv:CVE-2024-46705",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.10.7",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2024-46705",
      "aliases": [
        "CVE-2024-46705"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "dd08ebf6c3525a7ea2186e636df064ea47281987"
                },
                {
                  "fixed": "b1c9fbed3884d3883021d699c7cdf5253a65543a"
                },
                {
                  "fixed": "c7117419784f612d59ee565145f722e8b5541fe6"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46705.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.8.0"
                },
                {
                  "fixed": "6.10.7"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46705.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:38.598081961Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/b1c9fbed3884d3883021d699c7cdf5253a65543a",
        "https://git.kernel.org/stable/c/c7117419784f612d59ee565145f722e8b5541fe6",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46705.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-46705",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46705.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-46705",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 505950,
  "published_at": "2024-09-13T06:27:32.455+00:00"
}