CVE-2024-36948

What it actually does

Potential integer overflow in drm/xe migration code when multiplying two u32 operands before casting the result to u64, which could corrupt memory calculations in the Linux kernel graphics subsystem.

Why it matters to the business

Kernel memory corruption on systems using the affected Intel Xe graphics driver may cause crashes, instability, or unpredictable behavior in graphics workloads, increasing operational risk for Linux servers and workstations with recent Intel GPUs.

How an attack unfolds

An attacker with local access crafts graphics or migration operations that trigger the multiplication overflow, leading to incorrect memory sizing or addressing that corrupts kernel structures.

How to fix it

Update the Linux kernel to the commit e23a904dfeb5a9e3d4ec527a365e962478cccf05 or later stable versions containing the cast-to-output-precision fix in xe_migrate.

How to confirm the fix worked

Verify the presence of the corrected multiplication cast in xe_migrate.c and confirm the driver loads without overflow warnings on affected hardware; test graphics migration workloads post-update.

Typical attack path

1. Obtain local code execution on a vulnerable Linux system
2. Trigger Xe driver migration paths with inputs that cause u32 multiplication to exceed 32-bit range
3. Exploit resulting memory corruption for privilege escalation or denial of service

How to detect it

Review kernel logs for Xe driver warnings or panics related to migration or memory allocation; examine audit logs for unexpected graphics API calls from untrusted processes.

What your security team should do

• Prioritize kernel updates on all systems exposing Intel Xe graphics
• Monitor for unusual kernel oops or graphics driver crashes as potential indicators
• Restrict unprivileged local access where feasible until patches are applied