CVE-2024-42123
published 2024-07-30CVE-2024-42123: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In…
PriorityP413medium4.4CVSS 3.1
AVLACLPRHUINSUCNINAH
EPSS
0.21%
11.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix double free err_addr pointer warnings
In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages
will be run many times so that double free err_addr in some special case.
So set the err_addr to NULL to avoid the warnings.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.9.9-1 (forky) | linux 6.9.9-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 8e24beb3c2b08a4763f920399a9cc577ed440a1a | 8e24beb3c2b08a4763f920399a9cc577ed440a1a |
| linux | linux | >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 506c245f3f1cd989cb89811a7f06e04ff8813a0d | 506c245f3f1cd989cb89811a7f06e04ff8813a0d |
| linux | linux_kernel | <= 6.9.9 | — |
| linux | linux_kernel | >= 0 < 6.9.9-1 | 6.9.9-1 |
| linux | linux_kernel | >= 0 < 6.9.9-1 | 6.9.9-1 |
CVSS provenance
nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
osv4.4MEDIUM
vendor_debian4.4MEDIUM
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5j3v-wvv7-9rvc: In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix double free err_addr pointer warnings
In amdgpu_umc_bad_page_pol
ghsa_unreviewed·2024-07-30
CVE-2024-42123 [MEDIUM] CWE-415 GHSA-5j3v-wvv7-9rvc: In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix double free err_addr pointer warnings
In amdgpu_umc_bad_page_pol
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix double free err_addr pointer warnings
In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages
will be run many times so that double free err_addr in some special case.
So set the err_addr to NULL to avoid the warnings.
OSV
CVE-2024-42123: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polli
osv·2024-07-30·CVSS 4.4
CVE-2024-42123 [MEDIUM] CVE-2024-42123: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polli
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages will be run many times so that double free err_addr in some special case. So set the err_addr to NULL to avoid the warnings.
Red Hat
kernel: drm/amdgpu: fix double free err_addr pointer warnings
vendor_redhat·2024-07-30·CVSS 4.4
CVE-2024-42123 [MEDIUM] CWE-415 kernel: drm/amdgpu: fix double free err_addr pointer warnings
kernel: drm/amdgpu: fix double free err_addr pointer warnings
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix double free err_addr pointer warnings
In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages
will be run many times so that double free err_addr in some special case.
So set the err_addr to NULL to avoid the warnings.
A vulnerability was found in the amdgpu_umc_handle_bad_pages() function in the Linux kernel's amdgpu driver. If the function is called multiple times in quick succession, a double free error can occur because the err_data->err_addr pointer that is being freed is not being set to NULL in between calls. This could lead to memory corruption or crashes.
Statement: Red Hat believes this flaw is moderate severity becau
Debian
CVE-2024-42123: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
vendor_debian·2024·CVSS 4.4
CVE-2024-42123 [MEDIUM] CVE-2024-42123: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages will be run many times so that double free err_addr in some special case. So set the err_addr to NULL to avoid the warnings.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 6.9.9-1)
sid: resolved (fixed in 6.9.9-1)
trixie: resolved (fixed in 6.9.9-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-30
Published