CVE-2024-46724
kernel: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 18, 2024
Updated · October 29, 2026
Description
A flaw was found in the drm/amdgpu component of the Linux kernel. An improper range check of the fb_channel_number could allow a local attacker to perform an out-of-bounds read. This could lead to information disclosure or a denial of service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a modprobe configuration file.
- Create a file named
/etc/modprobe.d/disable-amdgpu.confwith the following content:blacklist amdgpu install amdgpu /bin/true - Regenerate the initramfs to apply the changes:
dracut -f -v - Reboot the system for the changes to take effect.
Warning: Blacklisting the amdgpu module will disable AMD graphics functionality, potentially impacting system display and performance.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-125 · Out-of-bounds Read