CVE-2024-26833: drm/amd/display: Fix memory leak in dm_sw_fini()
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix memory leak in dmswfini()
After destroying dmubsrv, the memory associated with it is not freed, causing a memory leak:
unreferenced object 0xffff896302b45800 (size 1024): comm "(udev-worker)", pid 222, jiffies 4294894636 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 6265fd77): [<ffffffff993495ed>] kmalloctrace+0x29d/0x340 [<ffffffffc0ea4a94>] dmdmubswinit+0xb4/0x450 [amdgpu] [<ffffffffc0ea4e55>] dmswinit+0x15/0x2b0 [amdgpu] [<ffffffffc0ba8557>] amdgpudeviceinit+0x1417/0x24e0 [amdgpu] [<ffffffffc0bab285>] amdgpudriverloadkms+0x15/0x190 [amdgpu] [<ffffffffc0ba09c7>] amdgpupciprobe+0x187/0x4e0 [amdgpu] [<ffffffff9968fd1e>] localpciprobe+0x3e/0x90 [<ffffffff996918a3>] pcideviceprobe+0xc3/0x230 [<ffffffff99805872>] reallyprobe+0xe2/0x480 [<ffffffff99805c98>] driverprobedevice+0x78/0x160 [<ffffffff99805daf>] driverprobedevice+0x1f/0x90 [<ffffffff9980601e>] driverattach+0xce/0x1c0 [<ffffffff99803170>] busforeachdev+0x70/0xc0 [<ffffffff99804822>] busadddriver+0x112/0x210 [<ffffffff99807245>] driverregister+0x55/0x100 [<ffffffff990012d1>] dooneinitcall+0x41/0x300
Fix this by freeing dmubsrv after destroying it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Operational
In drm/amd/display dm_sw_fini(), free dmub_srv after destroying it to prevent the memory leak.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26833?
CVE-2024-26833 has a medium severity due to the memory leak issue in the Linux kernel.
How do I fix CVE-2024-26833?
To fix CVE-2024-26833, update your Linux kernel to the latest patched version.
Which Linux kernel versions are affected by CVE-2024-26833?
CVE-2024-26833 affects various versions in the Linux kernel, particularly those between 5.6 and 6.8-rc5.
Is there a memory leak vulnerability in CVE-2024-26833?
Yes, CVE-2024-26833 is specifically a memory leak vulnerability in the dm_sw_fini() function.
What is the impact of CVE-2024-26833 on system performance?
The impact of CVE-2024-26833 can lead to increased memory usage over time, potentially affecting system performance.