Vulnerability in Linux

CVE-2024-36949

In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one device doing reset in parallel, the first device will call kfd_suspend_all_processes() to evict all processes on all devices, this call takes time to finish. other device will start reset and recover without waiting. if the process has not been evicted before doing recover, it will be restored, then caused page fault.

EPSS: 0.002 (13.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

References

Frequently asked questions

What is CVE-2024-36949?
CVE-2024-36949 is a medium-severity vulnerability in Linux. CVSS score: 4.7/10. Published 2024-05-30.
How severe is CVE-2024-36949?
Medium severity. CVSS v3 base score is 4.7 out of 10.