PT-2024-3346 · Linux+7 · Linux Kernel+7

Published 2023-11-07 · Updated 2025-09-29 · CVE-2024-26649

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer error in the Linux kernel's amdgpu driver, specifically in the function amdgpu ucode request when loading RLC firmware with an invalid header size. This can lead to a null pointer error in subsequent use. The problem arises when the RLC firmware is released due to a wrong header size, causing a null pointer error. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

ALSA-2025_16880

BDU:2024-03618

CESA-2024_7000

CESA-2024_7001

CVE-2024-26649

INFSA-2024_7000

INFSA-2024_7001

RHSA-2023:6583

RHSA-2023_6583

RHSA-2024:2394

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024_2394

RHSA-2024_7000

RHSA-2024_7001

RLSA-2024:7001

USN-6765-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

Affected Products

Almalinux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 623

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26649.json · Exploit
• https://ubuntu.com/security/CVE-2023-52690 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26598 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52452 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52635 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35838 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52451 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52608 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52610 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52453 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52679 · Vendor Advisory