CVE-2024-43867
linux: In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Call...
CVE-2024-43867 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-43867, released August 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0022
12th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling nouveau_bo_ref() on a nouveau_bo without initializing it (and hence the backing ttm_bo) leads to a refcount underflow. Instead of calling nouveau_bo_ref() in the unwind path of drm_gem_object_init(), clean things up manually. (cherry picked from commit 1b93f3e89d03cfc576636e195466a0d728ad8de5)
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| bpftool · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-64kb · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-azure · opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-azure · sles 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-livepatch-SLE15-SP6-RT_Update_2 · sles 15.6 | 1-150600.1.3.2 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-livepatch-SLE15-SP6_Update_4 · sles 15.6 | 1-150600.13.3.3 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-rt · opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-rt_debug · opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-source-azure · opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-source-azure · sles 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-source-rt · opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-syms-azure · opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-syms-azure · sles 15.6 | 6.4.0-150600.8.11.1 | SUSE-SU-2024:3194-1 | Sep 10, 2024 |
| kernel-syms-rt · opensuse-leap 15.6 | 6.4.0-150600.10.8.1 | SUSE-SU-2024:3195-1 | Sep 10, 2024 |
| kernel-uek · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12782 | Oct 14, 2024 |
| kernel-uek-container · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container-debug · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-container-debug · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12782 | Oct 14, 2024 |
| kernel-uek-container-debug · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-core · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-core · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-debug · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-core · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-core · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-devel · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-devel · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-debug-devel · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules-extra · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-debug-modules-extra · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-devel · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-devel · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-devel · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-doc · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-doc · ol 8 | 0:5.4.17-2136.336.5.1.el8uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-doc · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules-extra · ol 8 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-modules-extra · ol 9 | 0:5.15.0-302.167.6.el9uek | ELSA-2024-12815 | Nov 11, 2024 |
| kernel-uek-tools · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-uek-tools-libs · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| kernel-zfcpdump · sles 15.6 | 6.4.0-150600.23.22.1 | SUSE-SU-2024:3383-1 | Sep 23, 2024 |
| linux · Debian 12.15 (bookworm) | 6.1.106-1 | DEBIAN-CVE-2024-43867 | Aug 21, 2024 |
| linux · Debian 13.5 (trixie) | 6.10.4-1 | DEBIAN-CVE-2024-43867 | Aug 21, 2024 |
| linux · Debian 14 | 6.10.4-1 | DEBIAN-CVE-2024-43867 | Aug 21, 2024 |
| perf · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
| python-perf · ol 8 | 0:5.4.17-2136.336.5.1.el7uek | ELSA-2024-12780 | Oct 11, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.