boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2024-40924MEDIUM
Linux Linux — drm/i915/dpt: Make DPT object unshrinkable
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  N  N  H    5.5   .0030   22.2     —
AFFECTED
  Product  Versions                                    Fixed
  Linux    0dc987b699ce4266450d407d6d79d41eab88c5d0 –  —
  Linux    6.0 –                                       6.1.95
TIMELINE
  Jul 12  Reserved by Linux
  Jul 12  Published (CNA: Linux)
  Aug 4   RESCORED — CVE-2024-40924 (Linux). CVSS 7.8 → 5.5 (NVD).
CNA: Linux · CVSS v3.1 · 5 references · NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Make DPT object unshrinkable In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm->bound_list. Then it tries to rewrite the PTEs via a stale CPU mapping. This causes panic. [vsyrjala: Add TODO comment] (cherry picked from commit 51064d471c53dcc8eddd2333c3f1c1d9131ba36c)

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
July 12, 2024ReservedReserved by Linux
July 12, 2024PublishedPublished (CNA: Linux)
August 4, 2026RESCOREDRESCORED — CVE-2024-40924 (Linux). CVSS 7.8 → 5.5 (NVD).

Affected

Affected products and packages — 2 rows
VendorProduct / PackageEcosystemVersion introducedFixed
LinuxLinux0dc987b699ce4266450d407d6d79d41eab88c5d0
LinuxLinux6.06.1.95

References (5)

Related

Authoritative record: CVE-2024-40924 at cve.org

Vendors: linux

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-40924 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.