https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:56:39 +0000 https://cve.radiocsirt.org/vuln/cve-2024-46837 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/panthor: Restrict high priorities on group_create</p> <p>We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service.</p> <p>We now only allow the DRM master or users with the CAP_SYS_NICE capability to set higher priorities than PANTHOR_GROUP_PRIORITY_MEDIUM.</p> <p>As the sole user of that uAPI lives in Mesa and hardcode a value of MEDIUM [1], this should be safe to do.</p> <p>Additionally, as those checks are performed at the ioctl level, panthor_group_create now only check for priority level validity.</p> <p>[1]https://gitlab.freedesktop.org/mesa/mesa/-/blob/f390835074bdf162a63deb0311d1a6de527f9f89/src/gallium/drivers/panfrost/pan_csf.c#L1038</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/panthor: Restrict high priorities on group_create</p> <p>We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service.</p> <p>We now only allow the DRM master or users with the CAP_SYS_NICE capability to set higher priorities than PANTHOR_GROUP_PRIORITY_MEDIUM.</p> <p>As the sole user of that uAPI lives in Mesa and hardcode a value of MEDIUM [1], this should be safe to do.</p> <p>Additionally, as those checks are performed at the ioctl level, panthor_group_create now only check for priority level validity.</p> <p>[1]https://gitlab.freedesktop.org/mesa/mesa/-/blob/f390835074bdf162a63deb0311d1a6de527f9f89/src/gallium/drivers/panfrost/pan_csf.c#L1038</p> https://cve.radiocsirt.org/vuln/cve-2024-46837