CVE-2024-26986: drm/amdkfd: Fix memory leak in create_process failure
Published May 1, 2024
·Updated
drm/amdkfd: Fix memory leak in createprocess failure
Affected Software
16 affected componentsFixes available
Linux Linux kernel>=6.5<6.6.29
Linux Linux kernel>=6.7<6.8.8
Linux Linux kernel=6.9-rc1
Linux Linux kernel=6.9-rc2
Linux Linux kernel=6.9-rc3
Linux Linux kernel=6.9-rc4
Fedoraproject Fedora=38
Fedoraproject Fedora=39
Fedoraproject Fedora=40
Microsoft azl3 kernel 6.6.22.1-2
Microsoft azl3 hyperv-daemons 6.6.22.1-2
Microsoft azl3 kernel 6.6.35.1-5
Microsoft azl3 hyperv-daemons 6.6.35.1-1
debian/linux<6.8.9-1
6.8.9-1
debian/linux<6.8.9-1
6.8.9-1
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.8.9-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
May 1, 2024
CVE Published
via MITRE·05:27 AM
Data Sourced
via MITRE·05:27 AM
Description
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·06:15 AM
DescriptionSeverityAffected Software
Sep 11, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-26986?
CVE-2024-26986 has a medium severity level due to its potential impact on system stability.
2
How do I fix CVE-2024-26986?
To remediate CVE-2024-26986, update your Linux kernel to a patched version such as 5.10.223-1 or higher.
3
Which Linux kernel versions are affected by CVE-2024-26986?
CVE-2024-26986 affects Linux kernel versions between 6.5 and 6.6.29, as well as pre-release versions like 6.9-rc1 to 6.9-rc4.
4
What type of vulnerability is CVE-2024-26986?
CVE-2024-26986 is a memory leak vulnerability that occurs during the error handling of KFD process creation.
5
Is CVE-2024-26986 present in Fedora?
Yes, CVE-2024-26986 is present in Fedora versions 38, 39, and 40.