CVE-2024-47729: 
Linux Debian vulnerability analysis and mitigation

In the Linux kernel, a vulnerability (CVE-2024-47729) was identified in the drm/xe driver component. The issue involves a potential deadlock condition where user binds map to engines that can fault, and faults depend on user binds completion. This vulnerability affects Linux kernel versions from 6.8 up to (excluding) 6.11.2 (NVD).

The vulnerability stems from a design flaw in the handling of user binds in the drm/xe driver. When user binds map to engines with fault capability, and these faults depend on user binds completion, a circular dependency can occur leading to a deadlock. The issue has been assigned a CVSS v3.1 Base Score of 5.5 MEDIUM (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) (NVD, Kernel Patch).

The vulnerability can result in a deadlock condition, potentially causing system unavailability or denial of service. This affects the availability of the system but does not impact confidentiality or integrity (NVD).

The issue has been fixed by using a reserved copy engine for user binds on faulting devices. The fix normalizes bind queue creation with a helper and ensures proper handling of the reserved copy engine instance to avoid deadlocks. The patch is available in the Linux kernel repository (Kernel Patch).