CVE-2024-41011 — Incorrect Calculation in Linux
Severity
7.8HIGHNVD
OSV8.8OSV7.1OSV6.5OSV5.5
EPSS
0.0%
top 94.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 18
Latest updateJan 9
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
We don't get the right offset in that case. The GPU has
an unused 4K area of the register BAR space into which you can
remap registers. We remap the HDP flush registers into this
space to allow userspace (CPU or GPU) to flush the HDP when it
updates VRAM. However, on systems with >4K pages, we end up
exposing PAGE_SIZE of MMIO space.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages9 packages
▶CVEListV5linux/linuxd8e408a82704c86ba87c3d58cfe69dcdb758aa07 — 009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884+7