PT-2024-32223 · Linux+1 · Linux Kernel+1

Published 2024-05-13 · Updated 2026-03-16 · CVE-2024-46820

Positive Technologies · (AI Summary)

CVSS v3.1

7.8

High

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.0.0

Description The issue is related to the removal of irq disabling in vcn 5 suspend in the Linux kernel. Specifically, the calls to disable IRQ and set state are removed, which gets rid of the warning "WARN ON(!amdgpu irq enabled(adev, src, type))" in amdgpu irq put(). This change is made because VCN IRQ is not directly enabled or disabled in vcn 5.0.0, and the IRQ state is not handled.

Recommendations As a temporary workaround, consider disabling the amdgpu irq put() function until a patch is available. Restrict access to the drm/amdgpu/vcn module to minimize the risk of exploitation. Avoid using the amdgpu irq enabled() function in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-662

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-07237

CVE-2024-46820

INFSA-2025_6966

RHSA-2025:6966

RHSA-2025_6966

Affected Products

Linux Kernel

Red Hat

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46820.json · Exploit
• https://cve.org/CVERecord?id=CVE-2024-46820 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-46820 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-6966.html · Vendor Advisory
• https://git.kernel.org/stable/c/10fe1a79cd1bff3048e13120e93c02f8ecd05e9d · Patch
• https://bdu.fstec.ru/vul/2025-07237 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-46820 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46820 · Security Note
• https://git.kernel.org/stable/c/aa92264ba6fd4fb570002f69762634221316e7ae · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-46820 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-46820 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-46820 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46820 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-46820 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2024-46820 · Vendor Advisory