CVE-2024-49991

A flaw was found in the Linux kernel's drm/amdkfd component. This use-after-free vulnerability occurs in the amdkfd_free_gtt_mem function due to incorrect pointer handling. An attacker with administrative privileges could exploit this flaw, potentially leading to information disclosure or a denial of service.

This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, the amdkfd kernel module can be blacklisted to prevent it from loading. This action may impact systems utilizing AMD GPUs that rely on this module for functionality.

To blacklist the module, create a file named /etc/modprobe.d/amdkfd-blacklist.conf with the following content:

blacklist amdkfd

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect:

dracut -f
# OR (for older systems)
mkinitrd -f
reboot

A system reboot is required for the changes to take effect.