CVE-2024-26986: drm/amdkfd: Fix memory leak in create_process failure
Published May 1, 2024
·Updated
drm/amdkfd: Fix memory leak in createprocess failure
Affected Software
14 affected componentsFixes available
Linux Linux kernel>=6.5<6.6.29
Linux Linux kernel>=6.7<6.8.8
Linux Linux kernel=6.9-rc1
Linux Linux kernel=6.9-rc2
Linux Linux kernel=6.9-rc3
Linux Linux kernel=6.9-rc4
Fedoraproject Fedora=38
Fedoraproject Fedora=39
Fedoraproject Fedora=40
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1
Microsoft azl3 hyperv-daemons 6.6.22.1-2
Microsoft azl3 kernel 6.6.22.1-2
Microsoft azl3 kernel 6.6.35.1-5
Microsoft azl3 hyperv-daemons 6.6.35.1-1
Remediation
Event History
May 1, 2024
CVE Published
via MITRE·05:27 AM
Data Sourced
via MITRE·05:27 AM
Description
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 11, 2024
Data Sourced
via Launchpad·07:45 PM
Description
Sep 11, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Dec 2, 2024
Data Sourced
via Ubuntu·08:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-26986?
CVE-2024-26986 has a medium severity level due to its potential impact on system stability.
2
How do I fix CVE-2024-26986?
To remediate CVE-2024-26986, update your Linux kernel to a patched version such as 5.10.223-1 or higher.
3
Which Linux kernel versions are affected by CVE-2024-26986?
CVE-2024-26986 affects Linux kernel versions between 6.5 and 6.6.29, as well as pre-release versions like 6.9-rc1 to 6.9-rc4.
4
What type of vulnerability is CVE-2024-26986?
CVE-2024-26986 is a memory leak vulnerability that occurs during the error handling of KFD process creation.
5
Is CVE-2024-26986 present in Fedora?
Yes, CVE-2024-26986 is present in Fedora versions 38, 39, and 40.