PT-2024-36846 · Linux+2 · Linux Kernel+2

Published 2024-10-07 · Updated 2025-02-28 · CVE-2024-56542

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-31-generic #31-Ubuntu

Description A memory leak issue was found in the Linux kernel's AMD display driver when the driver is removed. Running "modprobe amdgpu" the second time causes a call trace, indicating a memory manager issue during takedown. This is due to lost memory during the early init phase. The first time the driver is removed, memory is freed, but when the driver is inserted again, the VBIOS dmub is not active, causing communication with VBIOS DMUB to fail.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the memory leak issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-15355

CVE-2024-56542

USN-7310-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 755

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56542.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47721 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56542 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47680 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53183 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory