CVE-2024-58004 is a vulnerability identified in the Linux kernel specifically affecting the media subsystem related to Intel's IPU6 (Image Processing Unit 6). The issue arises from improper handling of CPU latency Quality of Service (QoS) requests during error conditions. When an error occurs, the kernel fails to remove the CPU latency QoS request and free the associated memory, leading to corruption of the CPU latency QoS linked list. This corruption manifests as invalid pointer references and list structure inconsistencies, causing kernel warnings and potential instability. The kernel logs indicate list_add corruption where the previous node's next pointer is incorrect, triggering kernel warnings and call traces related to list management functions such as __list_add_valid_or_report and pm_qos_update_target. The vulnerability is rooted in the failure to properly clean up QoS requests on error paths, which can lead to memory corruption and potentially kernel crashes or undefined behavior. The affected code paths involve the Intel graphics driver (i915) and the CPU latency QoS subsystem, which are critical for managing performance and power characteristics. Although no known exploits are reported in the wild, the flaw could be leveraged to cause denial of service or potentially escalate privileges if combined with other vulnerabilities. The vulnerability affects specific Linux kernel versions identified by commit hashes, and a patch has been released to remove the CPU latency QoS request on error, preventing list corruption and memory leaks.

For European organizations, this vulnerability poses a risk primarily to systems running affected Linux kernel versions with Intel IPU6 hardware and the i915 graphics driver enabled. The impact includes potential system instability, kernel panics, or denial of service due to kernel memory corruption. This can disrupt critical services, especially in environments relying on Linux servers for media processing, graphics workloads, or embedded systems using Intel IPU6 technology. Confidentiality and integrity impacts are limited unless combined with other vulnerabilities, but availability is at risk due to possible kernel crashes. Organizations in sectors such as telecommunications, media production, cloud service providers, and industrial control systems that deploy affected Linux kernels could experience operational disruptions. Given the kernel-level nature of the flaw, exploitation could affect a wide range of Linux distributions commonly used in Europe, including Ubuntu, Debian, Red Hat, and SUSE, particularly on Intel hardware platforms. The lack of known exploits reduces immediate risk, but the vulnerability should be addressed promptly to prevent potential exploitation and maintain system reliability.

European organizations should prioritize updating their Linux kernels to versions that include the patch for CVE-2024-58004. Specifically, they should track vendor advisories and apply kernel updates that remove the CPU latency QoS request on error paths to prevent list corruption. System administrators should audit their environments for the presence of Intel IPU6 hardware and the i915 driver usage to assess exposure. In environments where immediate patching is not feasible, consider disabling or limiting the use of CPU latency QoS features related to Intel IPU6, if possible, to reduce risk. Monitoring kernel logs for warnings related to list corruption or CPU latency QoS can help detect attempts to trigger the vulnerability. Additionally, implementing robust kernel crash recovery and system monitoring can mitigate operational impacts. For critical systems, testing kernel updates in staging environments before deployment is recommended to ensure stability. Finally, maintain a comprehensive inventory of Linux kernel versions and hardware configurations to facilitate rapid response to such vulnerabilities.