CVE-2024-41022: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix signedness bug in sdmav40processtrapirq()
The "instance" variable needs to be signed for the error handling to work.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41022?
CVE-2024-41022 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-41022?
To fix CVE-2024-41022, update to the patched versions which include 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2024-41022?
CVE-2024-41022 affects the Linux kernel versions prior to the patched releases listed in the remedy section.
What type of vulnerability is CVE-2024-41022?
CVE-2024-41022 is a signedness bug in the SDMA process of the DRM AMDGPU subsystem in the Linux kernel.
Is CVE-2024-41022 being actively exploited?
As of now, there is no public information indicating that CVE-2024-41022 is being actively exploited in the wild.