CVE-2024-49971

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs because the dml2_core_shared_mode_support and dml_core_mode_support functions attempt to access an array element beyond its allocated size. A local attacker could potentially exploit this out-of-bounds write, leading to a system crash or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a modprobe configuration file.

Create /etc/modprobe.d/disable-amdgpu.conf with the following content: blacklist amdgpu install amdgpu /bin/true

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. dracut -f -v (for RHEL 8/9) or mkinitrd -f -v /boot/initramfs-$(uname -r).img $(uname -r) (for RHEL 7)

This mitigation will disable AMD GPU functionality, potentially impacting graphical output and performance on systems with AMD display adapters.