CVE Database›Document archive›CVE-2024-46724

CVE-2024-46724

kernel: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

Loading…

Severity

Moderate

Red Hat Product Security

7.1

CVSS 3.1

Review impact separately from score.

Published · September 18, 2024

Updated · October 29, 2026

Description

A flaw was found in the drm/amdgpu component of the Linux kernel. An improper range check of the fb_channel_number could allow a local attacker to perform an out-of-bounds read. This could lead to information disclosure or a denial of service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a modprobe configuration file.

  1. Create a file named /etc/modprobe.d/disable-amdgpu.conf with the following content:
    blacklist amdgpu
    install amdgpu /bin/true
    
  2. Regenerate the initramfs to apply the changes:
    dracut -f -v
    
  3. Reboot the system for the changes to take effect.

Warning: Blacklisting the amdgpu module will disable AMD graphics functionality, potentially impacting system display and performance.

CVSS / CWE

CVSS 3.1 · 7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-125 · Out-of-bounds Read