Описание
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: add error handle to avoid out-of-bounds
if the sdma_v4_0_irq_id_to_seq return -EINVAL, the process should
be stop to avoid out-of-bounds read, so directly return -EINVAL.
A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability, caused by an out-of-bounds read in the sdma_v4_0_irq_id_to_seq function, could allow a local attacker to read sensitive information from kernel memory. This could lead to information disclosure or a denial of service (DoS) due to a system crash.
Меры по смягчению последствий
To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a blacklist configuration file.
- Create a file named
/etc/modprobe.d/blacklist-amdgpu.confwith the following content:
- Regenerate the initramfs to ensure the blacklist is applied during boot: For Red Hat Enterprise Linux 8 and 9:
For Red Hat Enterprise Linux 7:
- Reboot the system for the changes to take effect.
Caveats: Blacklisting the
amdgpumodule will disable functionality related to AMD GPUs, potentially affecting graphical display or any applications that rely on AMD graphics hardware. Ensure this is acceptable for your system's intended use before applying the mitigation.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Fixed | RHSA-2024:7001 | 24.09.2024 |
| Red Hat Enterprise Linux 8 | kernel | Fixed | RHSA-2024:7000 | 24.09.2024 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2024:9315 | 12.11.2024 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2024:9315 | 12.11.2024 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | kernel | Fixed | RHSA-2025:10701 | 09.07.2025 |
| RHOAI-2.13-RHEL-8 | rhoai/odh-codeflare-operator-rhel8 | Fixed | RHBA-2024:8413 | 24.10.2024 |
| RHOAI-2.13-RHEL-8 | rhoai/odh-dashboard-rhel8 | Fixed | RHBA-2024:8413 | 24.10.2024 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.4 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return -EINVAL, the process should be stop to avoid out-of-bounds read, so directly return -EINVAL.
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return -EINVAL, the process should be stop to avoid out-of-bounds read, so directly return -EINVAL.
In the Linux kernel, the following vulnerability has been resolved: d ...
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return -EINVAL, the process should be stop to avoid out-of-bounds read, so directly return -EINVAL.
Уязвимость функции sdma_v4_0_process_trap_irq() ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации
EPSS
4.4 Medium
CVSS3