Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Felix Kuehling

Researcher fromAMD
#17198of 53,632
15.6Total CVSS
Vulnerabilities · 2
High
2
PT-2024-6399
7.8
2024-05-10
Linux · Linux Kernel · CVE-2024-41011
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the drm/amdkfd module in the Linux kernel, where mapping the MMIO HDP page with large pages is not allowed due to incorrect offset handling. This can expose PAGE SIZE of MMIO space on systems with page sizes greater than 4K. The GPU has an unused 4K area in the register BAR space where registers can be remapped, including HDP flush registers, to allow userspace to flush the HDP when updating VRAM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2023-9385
7.8
2023-10-19
Linux · Linux Kernel · CVE-2023-52883
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a possible null pointer dereference in the `amdgpu vm bo update` function of the Linux kernel's `drm/amdgpu` component. This could allow a remote attacker to cause a denial of service. The problem occurs because `abo->tbo.resource` may be `NULL` in `amdgpu vm bo update`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.