CVE-2024-39471

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability, caused by an out-of-bounds read in the sdma_v4_0_irq_id_to_seq function, could allow a local attacker to read sensitive information from kernel memory. This could lead to information disclosure or a denial of service (DoS) due to a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a blacklist configuration file.

1. Create a file named /etc/modprobe.d/blacklist-amdgpu.conf with the following content:

   blacklist amdgpu
   

2. Regenerate the initramfs to ensure the blacklist is applied during boot: For Red Hat Enterprise Linux 8 and 9:

   sudo dracut -f -v
   

   For Red Hat Enterprise Linux 7:

   sudo dracut -f
   

3. Reboot the system for the changes to take effect.

Caveats: Blacklisting the amdgpu module will disable functionality related to AMD GPUs, potentially affecting graphical display or any applications that rely on AMD graphics hardware. Ensure this is acceptable for your system's intended use before applying the mitigation.