Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2024-46837: Linux kernel allows any user to set high priority groups
CVE-2024-46837 · published 2 years ago
Summary
The Linux kernel’s panthor component let any user create a high‑priority group, which could be abused to make the system unresponsive. The fix now limits this ability to system administrators or processes with special privileges, preventing such denial‑of‑service attempts. Apply the latest kernel updates from your Linux distribution to protect your systems.
What to do
- Update debian linux to version 6.10.11-1.
- Update linux kernel to version 6.10.10.
- Update linux linux_kernel to version 6.10.10 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 6.10, < 6.10.10 6.11 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:13 | debian | linux |
< 6.10.11-1 Fix: upgrade to 6.10.11-1
|
| Linux | linux | kernel |
>= 6.10.0, < 6.10.10 Fix: upgrade to 6.10.10
|
Original advisory text
drm/panthor: Restrict high priorities on group_create
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on group_create We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM master or users with the CAP_SYS_NICE capability to set higher priorities than PANTHOR_GROUP_PRIORITY_MEDIUM. As the sole user of that uAPI lives in Mesa and hardcode a value of MEDIUM [1], this should be safe to do. Additionally, as those checks are performed at the ioctl level, panthor_group_create now only check for priority level validity. [1]https://gitlab.freedesktop.org/mesa/mesa/-/blob/f390835074bdf162a63deb0311d1a6de527f9f89/src/gallium/drivers/panfrost/pan_csf.c#L1038
References
- https://git.kernel.org/stable/c/33eb0344e186a2bcc257c6c5a6e65c1cb42adb4a URL
- https://git.kernel.org/stable/c/5f7762042f8a5377bd8a32844db353c0311a7369 URL
- https://security-tracker.debian.org/tracker/CVE-2024-46837 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46837... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-46837 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Timeline
Published27 Sep 2024
Updated2 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta