PT-2024-29201 · Linux+5 · Linux Kernel+5

Published 2024-07-16 · Updated 2026-05-26 · CVE-2024-41008

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns a change in the handling and lifecycle of the vm->task info object in the Linux kernel. Specifically, vm->task info is now a dynamically allocated pointer with reference counting. Two new helper functions, amdgpu vm get task info and amdgpu vm put task info, have been introduced for task info lifecycle management. The patch also includes logistical changes for existing usage of vm->task info.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

AZL-62848

AZL-68255

CESA-2024_7000

CESA-2024_7001

CVE-2024-41008

ECHO-23EA-6EC3-66C1

INFSA-2024_7000

INFSA-2024_7001

INFSA-2024_9315

OESA-2024-2106

OESA-2024-2107

OESA-2024-2108

OESA-2024-2181

RHSA-2024:10771

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024:9315

RHSA-2024_7000

RHSA-2024_7001

RHSA-2024_9315

RLSA-2024:7001

Affected Products

Almalinux

Centos

Debian

Linux Kernel

Red Hat

Rocky Linux

References · 535

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41008.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2024-41008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46733 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-44954 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41016 · Security Note
• https://osv.dev/vulnerability/OESA-2024-2181 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52899 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46759 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43883 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-41008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46714 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40901 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-41008 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-41008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44944 · Security Note