Linux i915 GVT-g mediated GPU virtualisation (debugfs teardown): Companion to the vGPU debugfs cleanup bug: GVT-g

Impact

Companion to the vGPU debugfs cleanup bug: GVT-g destroys debugfs state without checking the DRM minor's debugfs root is still valid, crashing the host on teardown. Again on the vGPU lifecycle path, which is the tenant boundary on GVT-g deployments.

Who can reach it

Whoever can drive vGPU create/destroy on the host.

What to do

Fix ships in the Linux kernel. Update the kernel and reboot the node - in practice this is a drain plus reboot because the accelerator driver cannot be unloaded while jobs hold device file descriptors. No BIOS or firmware update needed.

References

Related entries

• HPE Insight Remote Support: XML external entity injection allows remote disclosure of server informationCVE-2024-11622 · HPE Insight Remote Support (XXE)High
• AMD Optimizing CPU Libraries (AOCL) - installation directory permissions: AOCL installs with permissive directoryCVE-2024-21960 · AMD Optimizing CPU Libraries (AOCL) - installation directory permissionsHigh
• Intel Data Center GPU Flex Series - Windows driver: Improper buffer restrictions in the Flex Series Windows driver letCVE-2024-36292 · Intel Data Center GPU Flex Series - Windows driverHigh
• AMD Optimizing CPU Libraries (AOCL) - DLL hijacking: A DLL search-order hijack in AOCL lets an attacker getCVE-2024-36339 · AMD Optimizing CPU Libraries (AOCL) - DLL hijackingHigh
• Dell OpenManage Server Administrator (XSL hijacking local privilege escalation): A local low-privileged user hijacksCVE-2024-37130 · Dell OpenManage Server Administrator (XSL hijacking local privilege escalation)High
• Intel Data Center GPU Flex Series - Windows driver: A further improper access control in the Flex Series Windows driverCVE-2024-45333 · Intel Data Center GPU Flex Series - Windows driverHigh