CVE-2024-21478

Summary

CVE-2024-21478 is a transient Denial of Service (DoS) vulnerability impacting the Linux kernel's KGSL (Kernel Generic Support for Linux Driver Model) subsystem. The issue arises when setting up a fence callback to free a KGSL memory entry object during Direct Memory Access (DMA) transactions. An attacker can exploit this vulnerability by sending malicious DMA requests, causing the system to become unresponsive and consuming significant CPU resources for an extended period. This can potentially lead to a Denial of Service condition, affecting system availability and performance. It is recommended that affected systems be updated with appropriate patches to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.