CVE-2024-53072: platform/x86/amd/pmc: Detect when STB is not available
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd/pmc: Detect when STB is not available
Loading the amdpmc module as:
amdpmc enablestb=1
...can result in the following messages in the kernel ring buffer:
amdpmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on RAM at 0x0000000000000000 - 0x0000000000ffffff WARNING: CPU: 10 PID: 2151 at arch/x86/mm/ioremap.c:217 ioremapcaller+0x2cd/0x340
Further debugging reveals that this occurs when the requests for S2DPHYSADDRLOW and S2DPHYSADDRHIGH return a value of 0, indicating that the STB is inaccessible. To prevent the ioremap warning and provide clarity to the user, handle the invalid address and display an error message.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53072?
CVE-2024-53072 is considered a medium-severity vulnerability in the Linux kernel.
How can I mitigate CVE-2024-53072?
To mitigate CVE-2024-53072, ensure that you are using an updated version of the Linux kernel that has addressed this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-53072?
CVE-2024-53072 affects Linux kernel versions from 5.18 to 6.1.117 and 6.2 to 6.6.61, as well as various release candidates of version 6.12.
What issue does CVE-2024-53072 address in the Linux kernel?
CVE-2024-53072 resolves a problem with the amd_pmc module where enabling STB can lead to kernel ring buffer log messages when STB is not available.
Is there a patch available for CVE-2024-53072?
Yes, there are patches available in newer versions of the Linux kernel that fix the issues described in CVE-2024-53072.