CVE-2024-36022: drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
In passthrough environment, when amdgpu is reloaded after unload, mode-1 is triggered after initializing the necessary IPs, That init does not include KFD, and KFD init waits until the reset is completed. KFD init is called in the reset handler, but in this case, the zone device and drm client is not initialized, causing app to create kernel panic.
v2: Removing the init KFD condition from amdgpuamdkfddrmclientcreate. As the previous version has the potential of creating DRM client twice.
v3: v2 patch results in SDMA engine hung as DRM open causes VM clear to SDMA before SDMA init. Adding the condition to in drm client creation, on top of v1, to guard against drm client creation call multiple times.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
The Linux kernel CVE team has assigned CVE-2024-36022 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053013-CVE-2024-36022-fe0e@gregkh/T
— Red Hat
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36022?
CVE-2024-36022 has a high severity rating due to its implications for device function and potential system crashes.
What software versions are affected by CVE-2024-36022?
CVE-2024-36022 affects kernel versions up to 6.8.6 and 6.9 for Red Hat, as well as multiple Debian kernel versions up to 6.1.123-1.
How do I fix CVE-2024-36022?
To fix CVE-2024-36022, upgrade to the patched versions of the kernel specified in the references, including Red Hat's 6.8.6 and 6.9 or Debian's 5.10.223-1, 5.10.226-1, 6.1.123-1, or 6.1.119-1.
Is there a exploit or proof of concept available for CVE-2024-36022?
As of now, there are no publicly known exploits or proof of concept code for CVE-2024-36022.
What is the impact of CVE-2024-36022 on system performance?
CVE-2024-36022 can lead to performance degradation or failures in the GPU handling and overall system stability.