CVE-2024-46723

A flaw was found in the Linux kernel's amdgpu graphics driver. This issue involves an out-of-bounds read when handling microcode (ucode) that was identified as a warning. While not a direct security vulnerability on its own, this flaw could potentially be leveraged by a local attacker with low privileges to trigger further issues that might lead to information disclosure or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a modprobe configuration file. Note that this may impact graphics functionality if an AMD GPU is in use. A system reboot is required for the changes to take effect.

Create a file named /etc/modprobe.d/blacklist-amdgpu.conf with the following content:

blacklist amdgpu

Then, regenerate the initramfs and reboot the system:

dracut -f -v
reboot