CVE-2024-46835
kernel: drm/amdgpu: Fix smatch static checker warning
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 27, 2024
Updated · October 29, 2026
Description
A flaw was found in the drm/amdgpu driver of the Linux kernel. A local attacker could exploit this vulnerability by triggering a null pointer dereference. This could lead to a system crash, causing a denial of service (DoS) on the affected system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, if AMD GPU hardware is not in use or its functionality is not critical, the amdgpu kernel module can be prevented from loading. This can be achieved by creating a blacklist entry for the module.
- Create a new configuration file:
echo "blacklist amdgpu" | sudo tee /etc/modprobe.d/amdgpu-blacklist.conf - Rebuild the initial ramdisk:
sudo dracut -f - Reboot the system for the changes to take effect:
sudo reboot
This mitigation may impact graphical performance or functionality if AMD GPU hardware is actively used. A system reboot is required for the changes to take effect.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference