PT-2024-26787 · Linux+6 · Linux Kernel+6

Published 2024-05-19 · Updated 2026-05-26 · CVE-2024-35931

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-92-generic

Description The vulnerability is related to the Linux kernel's handling of PCI error slot resets during RAS recovery. The PCI error slot reset may be triggered after injecting UE to UMC multiple times, causing a system hang. The issue is caused by the amdgpu ras do recovery function not properly handling the PCI error slot reset, leading to a general protection fault.

Technical details about exploitation include:

• Function Names: The amdgpu ras do recovery function is vulnerable.
• Vulnerable Parameters or Variables: The pci status variable is involved in the vulnerability.

Recommendations To resolve the issue, update the Linux kernel to version 5.15.0-92-generic or later. This update includes the fix for the drm/amdgpu vulnerability, which skips the PCI error slot reset during RAS recovery.

Exploit

Fix

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2025-12647

AZL-62607

AZL-67749

CVE-2024-35931

ECHO-0548-6D7C-C1E7

INFSA-2024_9315

OESA-2024-1941

OESA-2024-1942

OESA-2024-1943

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6893-1

USN-6893-2

USN-6893-3

USN-6918-1

Affected Products

Alt Linux

Debian

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 2195

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35931.json · Exploit
• https://ubuntu.com/security/CVE-2024-35933 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27032 · Security Note
• https://ubuntu.com/security/CVE-2024-35905 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6893-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35903 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35966 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-62607 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35977 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-35931 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40956 · Security Note
• https://ubuntu.com/security/CVE-2024-27019 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6893-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34777 · Security Note