CVE-2024-35810: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35810 affects the DRM (Direct Rendering Manager) driver for VMware Virtual GPU (vmwgfx) in the Linux kernel. The vulnerability was discovered and disclosed on May 17, 2024, and involves improper handling of buffer object cursor memory lifetime in the vmwgfx driver (Kernel Git).

The vulnerability stems from a race condition where cleanup can be dispatched while the atomic update is still active. The buffer objects in vmw_plane_state were attempting to manage the lifetime of mapped memory themselves instead of using the built-in map_and_cache functionality, which led to crashes. This issue specifically affects the cursor memory management in the VMware graphics driver (Kernel Git).

When exploited, this vulnerability can cause kernel crashes (oops) during cursor operations, particularly evident in IGT's kms_cursor_legacy forked-bo tests. This results in a denial of service condition affecting system stability (Kernel Git).

The vulnerability requires local access to the system and can be triggered through cursor operations in the VMware graphics environment. It has been confirmed to be reproducible through IGT's kms_cursor_legacy forked-bo testing (Kernel Git).

The issue has been fixed by modifying the code to use the built-in map_and_cache functionality instead of manual buffer object lifetime management. The fix has been implemented in the Linux kernel through a patch that properly handles the buffer object cursor memory lifetime (Kernel Git).