CVE-2024-58091: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-58091 affects the Linux kernel, specifically related to the DRM (Direct Rendering Manager) framebuffer DMA functionality. The vulnerability was disclosed on March 27, 2025, and involves issues with deferred I/O handling in DMA areas that are not properly backed by struct page (NVD).

The vulnerability exists in the drm/fbdev-dma component where DMA areas are not necessarily backed by struct page, causing reliability issues with deferred I/O operations. The issue manifests through driver errors related to kernel NULL pointer dereference or kernel paging request failures at virtual addresses. The fix involves implementing shadow buffering for deferred I/O DMA areas and restructuring the drmfbdevdmadriverfbdev_probe() function to handle buffer allocation and fbdev data structures separately (NVD).

When exploited, this vulnerability can lead to system instability through kernel NULL pointer dereferences and kernel paging request failures, potentially affecting the stability and functionality of systems using the affected DRM framebuffer DMA implementation (NVD).

A fix has been implemented that adds shadow buffering for deferred I/O DMA areas. The patch modifies the driver to allocate a shadow buffer for drivers requiring deferred I/O and uses it as framebuffer memory. The fix is available in the Linux kernel version 6.14-rc5 (Debian Tracker).