CVE-2024-46718: 
Linux Debian vulnerability analysis and mitigation

In the Linux kernel, a vulnerability (CVE-2024-46718) was identified in the drm/xe driver component. The issue involves overmapping the identity VRAM mapping, which triggers hardware bugs on certain platforms. This vulnerability was discovered and patched in September 2024 (Kernel Git).

The vulnerability occurs in the xe_migrate.c file of the Linux kernel's DRM/XE driver. The issue stems from improper handling of VRAM mapping where the system was using 1GB pages without considering the implications of mixing reserved memory with a single mapping. The fix implements the use of 2M pages for the last unaligned (to 1G) VRAM chunk to prevent hardware bugs (Kernel Git).

The vulnerability affects systems using the Linux kernel's DRM/XE driver, particularly those with discrete graphics hardware (DGFX). When exploited, the issue could trigger hardware bugs on affected platforms (Ubuntu Security).

The issue has been fixed in various Linux kernel versions. Ubuntu has released patches for Ubuntu 24.04 LTS (noble) with kernel version 6.8.0-50.51 and other affected versions. Users are advised to update their systems to the patched versions (Ubuntu Security).