CVE-2024-41022
drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.4.281, 5.10.223, 5.15.164, 6.1.102, 6.6.43, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() The "instance" variable needs to be signed for the error handling to work.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 5.4.278 · fixed in 5.4.281; From 5.10.219 · fixed in 5.10.223; From 5.15.161 · fixed in 5.15.164; From 6.1.94 · fixed in 6.1.102; From 6.6.34 · fixed in 6.6.43; From 6.9.5 · fixed in 6.9.12
- Linux Linux
6.10
References 8
git.kernel.org
- stable/c/3dd9734878a9042f0358301d19a2b006a0fc4d06
- stable/c/a5224e2123ce21102f346f518db80f004d5053a7
- stable/c/544fa213f15d27f0370795845d55eeb3e00080d2
- stable/c/e8dfbf83a82bbfb9680921719fbe65e535af59ea
- stable/c/4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287
- stable/c/d347c9a398bf7eab9408d207c0a50fb720f9de7d
- stable/c/298e2ce222e712ffafa47288c5b2fcf33d72fda3
- stable/c/6769a23697f17f9bf9365ca8ed62fe37e361a05a