PT-2024-5418 · Amd+9 · Amdgpu+9

Jack Xiao · Published 2024-04-23 · Updated 2026-04-20 · CVE-2024-38581

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free problem in the amdgpu driver, specifically in the amdgpu mes remove ring() function. This could potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is fixed by deleting the fence fallback timer to resolve the random use-after-free issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-10855

ALT-PU-2024-11524

ALT-PU-2024-13979

ALT-PU-2024-14046

BDU:2024-06062

CESA-2024_7000

CESA-2024_7001

CVE-2024-38581

INFSA-2024_7000

INFSA-2024_7001

INFSA-2024_9315

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-1863

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024:9315

RHSA-2024_7000

RHSA-2024_7001

RHSA-2024_9315

RHSA-2025:4342

RLSA-2024:7001

SUSE-SU-2024:2372-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2571-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Red Hat

Red Os

Rocky Linux

Suse

Amdgpu

References · 3059

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38581.json · Exploit
• https://advisories.mageia.org/MGASA-2024-0266.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38632 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1863 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36951 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-38581 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40971 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-38581 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36931 · Security Note
• https://osv.dev/vulnerability/RLSA-2024:7001 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-38581 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-38581 · Vendor Advisory