CVE-2024-41022

drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()

State
Published
Severity
7.0 High
Published
Jul 29, 2024
Updated
Aug 5, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()

The "instance" variable needs to be signed for the error handling to work.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5594971e02764aa1c8210ffb838cb4e7897716e8 to before 3dd9734878a9042f0358301d19a2b006a0fc4d06Affected
  • 8112fa72b7f139052843ff484130d6f97e9f052f to before a5224e2123ce21102f346f518db80f004d5053a7Affected
  • ea906e9ac61e3152bef63597f2d9f4a812fc346a to before 544fa213f15d27f0370795845d55eeb3e00080d2Affected
  • 011552f29f20842c9a7a21bffe1f6a2d6457ba46 to before e8dfbf83a82bbfb9680921719fbe65e535af59eaAffected
  • 5b0a3dc3e87821acb80e841b464d335aff242691 to before 4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287Affected
  • 0964c84b93db7fbf74f357c1e20957850e092db3 to before d347c9a398bf7eab9408d207c0a50fb720f9de7dAffected
  • 8b2faf1a4f3b6c748c0da36cda865a226534d520 to before 298e2ce222e712ffafa47288c5b2fcf33d72fda3Affected
  • 8b2faf1a4f3b6c748c0da36cda865a226534d520 to before 6769a23697f17f9bf9365ca8ed62fe37e361a05aAffected
  • 5.4.278 to before 5.4.281Affected
  • 5.10.219 to before 5.10.223Affected
  • 5.15.161 to before 5.15.164Affected
  • 6.1.94 to before 6.1.102Affected
  • 6.6.34 to before 6.6.43Affected
  • 6.9.5 to before 6.9.12Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 5.4.281 through 5.4.*Not affected
  • 5.10.223 through 5.10.*Not affected
  • 5.15.164 through 5.15.*Not affected
  • 6.1.102 through 6.1.*Not affected
  • 6.6.43 through 6.6.*Not affected
  • 6.9.12 through 6.9.*Not affected
  • 6.10.2 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.