What is CVE-2024-35817?

CVE-2024-35817 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-05-17.

How severe is CVE-2024-35817?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2024-35817

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag Otherwise after the GTT bo is released, the GTT and gart space is freed but amdgpu_ttm_backend_unbind will not clear the gart page table entry and leave valid mapping entry pointing to the stale system page. Then if GPU access the gart address mistakely, it will read undefined value instead page fault, harder to debug and reproduce the real issue.

EPSS: 0.002 (15.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 0b988ca1c7c4c73983b4ea96ef7c2af2263c87eb, 5.10, 0
Linux Linux_kernel

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-35817?: CVE-2024-35817 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-05-17.
How severe is CVE-2024-35817?: High severity. CVSS v3 base score is 7.8 out of 10.