CVE-2024-27411

drm/nouveau: keep DMA buffers required for suspend/resume

MEDIUM
5.5
CVSS Score
Published: May 17, 2024 at 11:50 AM UTC
Updated: August 4, 2026 at 04:06 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: keep DMA buffers required for suspend/resume Nouveau deallocates a few buffers post GPU init which are required for GPU suspend/resume to function correctly. This is likely not as big an issue on systems where the NVGPU is the only GPU, but on multi-GPU set ups it leads to a regression where the kernel module errors and results in a system-wide rendering freeze. This commit addresses that regression by moving the two buffers required for suspend and resume to be deallocated at driver unload instead of post init.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.7.6 ≤ v < 6.7.942b5f83841fbf7ce39474412db3b5e4765a7ea76.7.66.8 rc46.8 rc56.8 rc66190d4c08897d748dd25f0b78267a90aa1694e15
Vendor states this is fixed in be00e15b240ed71fc30c0576af7ab670c8271661 (fixed)
Vendor states this is fixed in f6ecfdad359a01c7fd8a3bcfde3ef0acdf107e6e (fixed)
Affected range stops below 6.7.9, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (2)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/be00e15b240ed71fc30c0576af7ab670c8271661
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f6ecfdad359a01c7fd8a3bcfde3ef0acdf107e6e

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card