CVE-2024-41011CWE-682

CVE-2024-41011

High · published July 18, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: don't allow mapping the MMIO HDP page with large pages

We don't get the right offset in that case. The GPU has

an unused 4K area of the register BAR space into which you can

remap registers. We remap the HDP flush registers into this

space to allow userspace (CPU or GPU) to flush the HDP when it

updates VRAM. However, on systems with >4K pages, we end up

exposing PAGE_SIZE of MMIO space.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-682 · Incorrect Calculation
Published
2024-07-18T11:15Z
Affected products (12)
ProductVersionsFixed in
linux/linux_kernel≥ 5.3, < 5.4.2835.4.283
linux/linux_kernel≥ 5.5, < 5.10.2255.10.225
linux/linux_kernel≥ 5.11, < 5.15.1665.15.166
linux/linux_kernel≥ 5.16, < 6.1.916.1.91
linux/linux_kernel≥ 6.7, < 6.8.106.8.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (12)
EPSS history
Timeline
  • 18 JUL 07:04Z
    drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
    cvelistv5