CVE-2024-49904

A flaw was found in the Linux kernel's drm/amdgpu component. A missing list empty check in certain scenarios can lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by blacklisting the module. Note that this may impact graphical functionality if an AMD GPU is in use.

Create a file /etc/modprobe.d/blacklist-amdgpu.conf with the following content: blacklist amdgpu

Then, regenerate the initramfs and reboot the system for the changes to take effect. For example, on Red Hat Enterprise Linux: dracut -f -v reboot

If the system relies on the AMD GPU for display or other critical functions, this mitigation may lead to reduced graphical performance or system instability. A system reboot is required for the changes to be applied.