CVE-2024-26922

drm/amdgpu: validate the parameters of bo mapping operations more clearly

State: Published
Severity: 7.8 High
Published: Apr 23, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: validate the parameters of bo mapping operations more clearly

Verify the parameters of amdgpu_vm_bo_(map/replace_map/clearing_mappings) in one common place.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before d4da6b084f1c5625937d49bb6722c5b4aef11b8dAffected dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before f68039375d4d6d67303674c0ab2d06b7295c0ec9Affected dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 1fd7db5c16028dc07b2ceec190f2e895dddb532dAffected dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 8b12fc7b032633539acdf7864888b0ebd49e90f2Affected dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 212e3baccdb1939606420d88f7f52d346b49a284Affected dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before ef13eeca7c79136bc38e21eb67322c1cbd5c40eeAffected dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before b1f04b9b1c5317f562a455384c5f7473e46bdbaaAffected dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 6fef2d4c00b5b8561ad68dd2b68173f5c6af1e75Affected
LinuxLinux	4.12Affected before 4.12Not affected 4.19.313 through 4.19.Not affected 5.4.275 through 5.4.Not affected 5.10.216 through 5.10.Not affected 5.15.157 through 5.15.Not affected 6.1.88 through 6.1.Not affected 6.6.29 through 6.6.Not affected 6.8.8 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before d4da6b084f1c5625937d49bb6722c5b4aef11b8dAffected
dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before f68039375d4d6d67303674c0ab2d06b7295c0ec9Affected
dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 1fd7db5c16028dc07b2ceec190f2e895dddb532dAffected
dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 8b12fc7b032633539acdf7864888b0ebd49e90f2Affected
dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 212e3baccdb1939606420d88f7f52d346b49a284Affected
dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before ef13eeca7c79136bc38e21eb67322c1cbd5c40eeAffected
dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before b1f04b9b1c5317f562a455384c5f7473e46bdbaaAffected
dc54d3d1744d23ed0b345fd8bc1c493b74e8df44 to before 6fef2d4c00b5b8561ad68dd2b68173f5c6af1e75Affected

LinuxLinux

4.12Affected
before 4.12Not affected
4.19.313 through 4.19.*Not affected
5.4.275 through 5.4.*Not affected
5.10.216 through 5.10.*Not affected
5.15.157 through 5.15.*Not affected
6.1.88 through 6.1.*Not affected
6.6.29 through 6.6.*Not affected
6.8.8 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.