GPU VulnDB

Database/Kernel, userspace & hypervisor

Linux kernel (drivers/gpu/drm/xe): User VM_BIND work is scheduled onto engines that can themselves take page faults

CVE-2024-47729Kernel, userspace & hypervisorcurated

Impact

User VM_BIND work is scheduled onto engines that can themselves take page faults, and resolving those faults depends on the bind completing. A tenant issuing binds on a fault-capable device deadlocks the GPU, and the device stops serving every other tenant on it until the node is reset.

Who can reach it

Tenant container holding /dev/dri/renderD* on an Intel xe device with recoverable page faults enabled: issue VM_BIND operations against a faulting VM. No capabilities required. Not reachable on xe platforms without recoverable faults.

What to do

Update to a kernel carrying the fix (stable commits below; no fixed_in published). Interim: disable recoverable page faults / SVM on shared xe devices.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.