CVE-2024-41060

A flaw was found in the Linux kernel's Radeon graphics driver. The driver fails to verify whether a memory buffer object pointer is valid before dereferencing it after freeing operations. A local user could exploit this flaw to cause a kernel crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local authenticated user access and is restricted to systems utilizing AMD Radeon graphics hardware. Typical enterprise and server installations do not utilize discrete Radeon GPUs, substantially reducing the attack surface across standard deployments. Although an unprivileged local user can trigger an unhandled pointer dereference causing an operating system crash, it does not permit privilege escalation or data confidentiality compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.