PT-2024-3461 · Linux+3 · Linux Kernel+3
Joonkyo Jung
·
Published
2024-03-15
·
Updated
2025-02-03
·
CVE-2024-26657
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.7.0
Description
The vulnerability is a null pointer dereference in the
drm sched entity init function, which can be triggered by sending an amdgpu cs wait ioctl to the AMDGPU DRM driver on any ASICs with valid context. The bug was reported by Joonkyo Jung. The change fixes the null pointer dereference in the init entity, and the stack demonstrates the error condition.The
amdgpu cs wait ioctl can be used to exploit this vulnerability. The amdgpu ctx get entity function is also involved in the call trace.The vulnerability can cause a kernel NULL pointer dereference, which can lead to a denial of service.
Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the null pointer dereference in the
drm sched entity init function.As a temporary workaround, consider disabling the
amdgpu cs wait ioctl function until a patch is available.Note: The provided information does not include specific details about the fixed version or the patchday that contains the fix for the vulnerability. Therefore, the recommendation is to update to the latest available version of the Linux kernel.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Suse
Ubuntu