Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-49904

Опубликовано: 21 окт. 2024
Источник: redhat
CVSS3: 4.4
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list empty check to avoid null pointer issues in some corner cases.

  • list_for_each_entry_safe()

    A flaw was found in the Linux kernel's drm/amdgpu component. A missing list empty check in certain scenarios can lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a denial of service.

Меры по смягчению последствий

To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by blacklisting the module. Note that this may impact graphical functionality if an AMD GPU is in use. Create a file /etc/modprobe.d/blacklist-amdgpu.conf with the following content: blacklist amdgpu Then, regenerate the initramfs and reboot the system for the changes to take effect. For example, on Red Hat Enterprise Linux: dracut -f -v reboot If the system relies on the AMD GPU for display or other critical functions, this mitigation may lead to reduced graphical performance or system instability. A system reboot is required for the changes to be applied.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelFixedRHSA-2025:696613.05.2025
Red Hat Enterprise Linux 9kernelFixedRHSA-2025:696613.05.2025

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=2320489kernel: drm/amdgpu: add list empty check to avoid null pointer issue

EPSS

Процентиль: 14%
0.00235
Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list empty check to avoid null pointer issues in some corner cases. - list_for_each_entry_safe()

CVSS3: 5.5
nvd
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list empty check to avoid null pointer issues in some corner cases. - list_for_each_entry_safe()

msrc
около 1 года назад

drm/amdgpu: add list empty check to avoid null pointer issue

CVSS3: 5.5
debian
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: d ...

CVSS3: 5.5
github
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list empty check to avoid null pointer issues in some corner cases. - list_for_each_entry_safe()

EPSS

Процентиль: 14%
0.00235
Низкий

4.4 Medium

CVSS3