CVE-2024-26833

drm/amd/display: Fix memory leak in dm_sw_fini()

State: Published
Severity: Not scored
Published: Apr 17, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix memory leak in dm_sw_fini()

After destroying dmub_srv, the memory associated with it is not freed, causing a memory leak:

unreferenced object 0xffff896302b45800 (size 1024): comm "(udev-worker)", pid 222, jiffies 4294894636 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 6265fd77): [<ffffffff993495ed>] kmalloc_trace+0x29d/0x340 [<ffffffffc0ea4a94>] dm_dmub_sw_init+0xb4/0x450 [amdgpu] [<ffffffffc0ea4e55>] dm_sw_init+0x15/0x2b0 [amdgpu] [<ffffffffc0ba8557>] amdgpu_device_init+0x1417/0x24e0 [amdgpu] [<ffffffffc0bab285>] amdgpu_driver_load_kms+0x15/0x190 [amdgpu] [<ffffffffc0ba09c7>] amdgpu_pci_probe+0x187/0x4e0 [amdgpu] [<ffffffff9968fd1e>] local_pci_probe+0x3e/0x90 [<ffffffff996918a3>] pci_device_probe+0xc3/0x230 [<ffffffff99805872>] really_probe+0xe2/0x480 [<ffffffff99805c98>] __driver_probe_device+0x78/0x160 [<ffffffff99805daf>] driver_probe_device+0x1f/0x90 [<ffffffff9980601e>] __driver_attach+0xce/0x1c0 [<ffffffff99803170>] bus_for_each_dev+0x70/0xc0 [<ffffffff99804822>] bus_add_driver+0x112/0x210 [<ffffffff99807245>] driver_register+0x55/0x100 [<ffffffff990012d1>] do_one_initcall+0x41/0x300

Fix this by freeing dmub_srv after destroying it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	743b9786b14ae0d7d13b3782dccad158e577e9bb to before b49b022f7dfce85eb77d0d987008fde5c01d7857Affected 743b9786b14ae0d7d13b3782dccad158e577e9bb to before 33f649f1b1cea39ed360e6c12bba4fac83118e6eAffected 743b9786b14ae0d7d13b3782dccad158e577e9bb to before 58168005337eabef345a872be3f87d0215ff3b30Affected 743b9786b14ae0d7d13b3782dccad158e577e9bb to before 10c6b90e975358c17856a578419dc449887899c2Affected 743b9786b14ae0d7d13b3782dccad158e577e9bb to before 541e79265ea7e339a7c4a462feafe9f8f996e04bAffected 743b9786b14ae0d7d13b3782dccad158e577e9bb to before bae67893578d608e35691dcdfa90c4957debf1d3Affected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.211 through 5.10.Not affected 5.15.150 through 5.15.Not affected 6.1.80 through 6.1.Not affected 6.6.19 through 6.6.Not affected 6.7.7 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

743b9786b14ae0d7d13b3782dccad158e577e9bb to before b49b022f7dfce85eb77d0d987008fde5c01d7857Affected
743b9786b14ae0d7d13b3782dccad158e577e9bb to before 33f649f1b1cea39ed360e6c12bba4fac83118e6eAffected
743b9786b14ae0d7d13b3782dccad158e577e9bb to before 58168005337eabef345a872be3f87d0215ff3b30Affected
743b9786b14ae0d7d13b3782dccad158e577e9bb to before 10c6b90e975358c17856a578419dc449887899c2Affected
743b9786b14ae0d7d13b3782dccad158e577e9bb to before 541e79265ea7e339a7c4a462feafe9f8f996e04bAffected
743b9786b14ae0d7d13b3782dccad158e577e9bb to before bae67893578d608e35691dcdfa90c4957debf1d3Affected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.211 through 5.10.*Not affected
5.15.150 through 5.15.*Not affected
6.1.80 through 6.1.*Not affected
6.6.19 through 6.6.*Not affected
6.7.7 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.