CVE-2024-36353
kernel: hw:amd Cross-Process GPU memory disclosure
Loading…
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 25, 2025
Updated · October 29, 2026
Description
Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-416 · Use After Free