In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix a use-after-free
looks like we forget to set ttm->sg to NULL. Hit panic below
[ 1235.844104] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 [#1] SMP DEBUG_PAGEALLOC NOPTI [ 1235.989074] Call Trace: [ 1235.991751] sg_free_table+0x17/0x20 [ 1235.995667] amdgpu_ttm_backend_unbind.cold+0x4d/0xf7 [amdgpu] [ 1236.002288] amdgpu_ttm_backend_destroy+0x29/0x130 [amdgpu] [ 1236.008464] ttm_tt_destroy+0x1e/0x30 [ttm] [ 1236.013066] ttm_bo_cleanup_memtype_use+0x51/0xa0 [ttm] [ 1236.018783] ttm_bo_release+0x262/0xa50 [ttm] [ 1236.023547] ttm_bo_put+0x82/0xd0 [ttm] [ 1236.027766] amdgpu_bo_unref+0x26/0x50 [amdgpu] [ 1236.032809] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0x7aa/0xd90 [amdgpu] [ 1236.040400] kfd_ioctl_alloc_memory_of_gpu+0xe2/0x330 [amdgpu] [ 1236.046912] kfd_ioctl+0x463/0x690 [amdgpu]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.238-182.421Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perf-debuginfo | Aug 28, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade bpftool | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-default-manUpgrade kernel-default | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-279-lowlatencyUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-awsUpgrade linux-image-4.4.0-279-genericUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1123-fipsUpgrade linux-image-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1191-awsUpgrade linux-image-4.4.0-1154-kvmUpgrade linux-image-generic-lts-xenial | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub