Riskcovery

CVE-2024-49991

drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer

State
Published
Severity
7.8 High
Published
Oct 21, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer

Pass pointer reference to amdgpu_bo_unref to clear the correct pointer, otherwise amdgpu_bo_unref clear the local variable, the original pointer not set to NULL, this could cause use-after-free bug.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 130e0371b7d454bb4a861253c822b9f911ad5d19 to before e7831613cbbcd9058d3658fbcdc5d5884ceb2e0cAffected
  • 130e0371b7d454bb4a861253c822b9f911ad5d19 to before 30ceb873cc2e97348d9da2265b2d1ddf07f682e1Affected
  • 130e0371b7d454bb4a861253c822b9f911ad5d19 to before 71f3240f82987f0f070ea5bed559033de7d4c0e1Affected
  • 130e0371b7d454bb4a861253c822b9f911ad5d19 to before 6c9289806591807e4e3be9a23df8ee2069180055Affected
  • 130e0371b7d454bb4a861253c822b9f911ad5d19 to before c86ad39140bbcb9dc75a10046c2221f657e8083bAffected
LinuxLinux
  • 4.3Affected
  • before 4.3Not affected
  • 6.1.118 through 6.1.*Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.