CVE-2024-46725

A flaw was found in the drm/amdgpu component of the Linux kernel. This out-of-bounds write vulnerability occurs due to an improper check of the ring type value. A local attacker with high privileges could exploit this flaw to cause data corruption, system instability, or potentially achieve privilege escalation.

This flaw will need a root/admin (PR:H) to exploit the OOB write.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a blacklist entry. Note that this may impact functionality if an AMD GPU is in use. A system reboot is required for the changes to take effect.

Create a file /etc/modprobe.d/blacklist-amdgpu.conf with the following content:

blacklist amdgpu

Then, regenerate the initramfs and reboot the system:

dracut -f -v
reboot

If the system uses an AMD GPU for display or other critical functions, blacklisting this module may lead to loss of graphics or other hardware-related functionality.