CVE-2024-46746

A flaw was found in the Linux kernel's amd_sfh driver. This use-after-free vulnerability occurs because the driver attempts to access data after it has been deallocated, specifically when handling Human Interface Device (HID) reports. A local attacker with high privileges could exploit this flaw to cause a denial of service or potentially execute arbitrary code.

This UAF flaw will be exploitable with PR:H.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the amd_sfh kernel module from loading. This can be achieved by creating a modprobe configuration file. Create a file named /etc/modprobe.d/disable-amd_sfh.conf with the following content: blacklist amd_sfh After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. dracut -f -v reboot Disabling this module may impact the functionality of HID sensors on AMD hardware. A system reboot is required for the changes to take effect.