CVE-2024-41060: drm/radeon: check bo_va->bo is non-NULL before using it
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: check bova->bo is non-NULL before using it
The call to radeonvmclearfreed might clear bova->bo, so we have to check it before dereferencing it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.164 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.101 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.42 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.11 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41060?
CVE-2024-41060 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-41060?
To mitigate CVE-2024-41060, update to kernel versions 5.15.164, 6.1.101, or higher as recommended in the security advisory.
Which systems are affected by CVE-2024-41060?
CVE-2024-41060 affects multiple versions of the Linux kernel, particularly those before 5.15.164, 6.1.101, and others listed in the advisory.
What components are involved in CVE-2024-41060?
CVE-2024-41060 involves components related to the DRM (Direct Rendering Manager) and the radeon graphics driver.
Is there an exploit available for CVE-2024-41060?
Currently, there is no public exploit reported for CVE-2024-41060, but it is advisable to apply patches to mitigate risks.