boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2024-50090MEDIUM
Linux Linux — drm/xe/oa: Fix overflow in oa batch buffer
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  N  N  H    5.5   .0022   12.2     —
AFFECTED
  Product  Versions                                    Fixed
  Linux    dd08ebf6c3525a7ea2186e636df064ea47281987 –  —
  Linux    6.8 –                                       6.11.4
TIMELINE
  Oct 21  Reserved by Linux
  Nov 5   Published (CNA: Linux)
  Aug 4   RESCORED — CVE-2024-50090 (Linux). CVSS 7.8 → 5.5 (NVD).
CWE-120 · CNA: Linux · CVSS v3.1 · 2 references · NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix overflow in oa batch buffer By default xe_bb_create_job() appends a MI_BATCH_BUFFER_END to batch buffer, this is not a problem if batch buffer is only used once but oa reuses the batch buffer for the same metric and at each call it appends a MI_BATCH_BUFFER_END, printing the warning below and then overflowing. [ 381.072016] ------------[ cut here ]------------ [ 381.072019] xe 0000:00:02.0: [drm] Assertion `bb->len * 4 + bb_prefetch(q->gt) <= size` failed! platform: LUNARLAKE subplatform: 1 graphics: Xe2_LPG / Xe2_HPG 20.04 step B0 media: Xe2_LPM / Xe2_HPM 20.00 step B0 tile: 0 VRAM 0 B GT: 0 type 1 So here checking if batch buffer already have MI_BATCH_BUFFER_END if not append it. v2: - simply fix, suggestion from Ashutosh (cherry picked from commit 9ba0e0f30ca42a98af3689460063edfb6315718a)

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
October 21, 2024ReservedReserved by Linux
November 5, 2024PublishedPublished (CNA: Linux)
August 4, 2026RESCOREDRESCORED — CVE-2024-50090 (Linux). CVSS 7.8 → 5.5 (NVD).

Affected

Affected products and packages — 2 rows
VendorProduct / PackageEcosystemVersion introducedFixed
LinuxLinuxdd08ebf6c3525a7ea2186e636df064ea47281987
LinuxLinux6.86.11.4

Weaknesses

CWE-120

References (2)

Related

Authoritative record: CVE-2024-50090 at cve.org

Vendors: linux

Weaknesses: CWE-120

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-50090 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.