{
  "cveId": "CVE-2024-50090",
  "url": "https://patchblox.com/security/cve/CVE-2024-50090",
  "summary": "CVE-2024-50090 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-50090, released November 5, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "drm/xe/oa: Fix overflow in oa batch buffer",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/xe/oa: Fix overflow in oa batch buffer  By default xe_bb_create_job() appends a MI_BATCH_BUFFER_END to batch buffer, this is not a problem if batch buffer is only used once but oa reuses the batch buffer for the same metric and at each call it appends a MI_BATCH_BUFFER_END, printing the warning below and then overflowing.  [  381.072016] ------------[ cut here ]------------ [  381.072019] xe 0000:00:02.0: [drm] Assertion \u0060bb-\u003Elen * 4 \u002B bb_prefetch(q-\u003Egt) \u003C= size\u0060 failed!                platform: LUNARLAKE subplatform: 1                graphics: Xe2_LPG / Xe2_HPG 20.04 step B0                media: Xe2_LPM / Xe2_HPM 20.00 step B0                tile: 0 VRAM 0 B                GT: 0 type 1  So here checking if batch buffer already have MI_BATCH_BUFFER_END if not append it.  v2: - simply fix, suggestion from Ashutosh  (cherry picked from commit 9ba0e0f30ca42a98af3689460063edfb6315718a)",
  "published": "2024-11-05T17:15:06Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00217,
  "epssPercentile": 0.12227,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-50090",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.11.4-1",
      "fix": "DEBIAN-CVE-2024-50090",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-50090",
      "released": "2024-11-05T17:15:06Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.11.4-1",
      "fix": "DEBIAN-CVE-2024-50090",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-50090",
      "released": "2024-11-05T17:15:06Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}