CVE-2024-50144 is a vulnerability identified in the Linux kernel's Direct Rendering Manager (DRM) subsystem, specifically within the Intel Xe graphics driver (drm/xe). The issue arises from an unbalanced reference count decrement (rpm put()) related to the fence_fini() function, which is responsible for cleaning up synchronization fences used in GPU command submission. The vulnerability occurs when fence_fini() is called twice due to an error path triggered during the submission of a GuC command transport layer (CT) request for a translation lookaside buffer (TLB) operation. When the first call to fence_fini() signals the fence and returns an error, the caller also attempts to finalize the fence again, leading to an extra rpm put() call. This unbalanced decrement can cause the device to enter a suspend state unexpectedly, even though a runtime power management (rpm) reference is still held. This behavior can lead to device instability, unexpected power state transitions, and potentially disrupt GPU operations. The patch resolves this by removing the redundant fence_fini() call and adding warnings to detect double fini() invocations. The vulnerability does not have known exploits in the wild and no CVSS score has been assigned yet. It primarily affects Linux kernel versions containing the specified commit hash, which corresponds to recent versions of the Linux kernel with Intel Xe graphics support.

For European organizations, this vulnerability could impact systems running Linux with Intel Xe graphics hardware, particularly in environments where GPU acceleration is critical, such as data centers, cloud providers, research institutions, and enterprises relying on Linux-based workstations. The unexpected device suspend behavior could lead to degraded system performance, application crashes, or service interruptions, especially in graphics-intensive or compute-heavy workloads. While this vulnerability does not appear to allow direct code execution or privilege escalation, the instability it causes could be exploited indirectly to cause denial of service or disrupt critical operations. Organizations using Linux-based infrastructure with Intel integrated graphics should be aware of potential reliability issues until patched. The impact is more pronounced in sectors relying on high availability and GPU-accelerated computing, such as financial services, scientific research, and media production.

To mitigate this vulnerability, organizations should: 1) Apply the official Linux kernel patch that fixes the unbalanced rpm put() call in the drm/xe driver as soon as it is available and tested in their environment. 2) Monitor kernel updates from trusted Linux distributions and vendors that include this fix. 3) Implement runtime monitoring for GPU device power states and error logs to detect abnormal suspend events or fence finalization warnings, which could indicate attempts to trigger this issue. 4) For critical systems, consider isolating or limiting the use of Intel Xe graphics hardware until patched, or use alternative hardware drivers if feasible. 5) Engage with hardware and software vendors to confirm compatibility and patch deployment timelines. 6) Maintain robust backup and recovery procedures to minimize impact from potential system instability caused by this vulnerability.