PT-2024-34055 · Linux+5 · Linux Kernel+5
Published
2024-10-28
·
Updated
2025-10-03
·
CVE-2024-50221
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.12.0-rc4
Description:
A kernel memory out of bounds write issue has been identified in the Linux kernel. The problem occurs because the GPU metrics table allocated in
vangogh tables init() is not large enough for the memset done in smu cmn init soft gpu metrics(). This results in a slab-out-of-bounds write. The root cause is that when GPU metrics tables for v2 4 parts were added, it was not considered to enlarge the table to fit. The issue is resolved with a fix, although it is noted as "brute force" and may be improved later.Recommendations:
For Linux kernel versions prior to 6.12.0-rc4, update to a newer version that includes the fix for the out of bounds write issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu