CVE-2024-44977: drm/amdgpu: Validate TA binary size
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Validate TA binary size
Add TA binary size validation to avoid OOB write.
(cherry picked from commit c0a04e3570d72aaf090962156ad085e37c62e442)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Upgrade
Upgrade
Linux kernel drm/amdgputo a version that resolves this vulnerability.Patch c0a04e3570d72aaf090962156ad085e37c62e442
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44977?
CVE-2024-44977 has a medium severity level due to its potential for causing out-of-bounds writes in the Linux kernel.
How do I fix CVE-2024-44977?
To fix CVE-2024-44977, update to the recommended versions of the Linux kernel, specifically 6.1.123-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-44977?
CVE-2024-44977 affects several versions of the Linux kernel, specifically from versions 6.2 to 6.6.48 and specific release candidates of version 6.11.
Is CVE-2024-44977 related to DRM or AMD graphics?
Yes, CVE-2024-44977 is associated with the AMD GPU drivers in the Linux kernel, relating to TA binary size validation.
What could happen if CVE-2024-44977 is exploited?
Exploitation of CVE-2024-44977 could lead to potential system crashes or arbitrary code execution due to out-of-bounds memory access.