CVE-2024-50189

A flaw was found in the Linux kernel's AMD Sensor Fusion Hub (SFH) Human Interface Device (HID) driver. Improper memory cleanup during the device's initialization process can lead to memory errors and system instability. A local attacker with low privileges could exploit this to trigger page faults, cause the Btrfs file system to become read-only, or lead to Btrfs disk corruption, effectively causing a Denial of Service (DoS) and potential data loss.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the amd_sfh kernel module from loading by blacklisting it. This can be achieved by creating a modprobe configuration file.

1. Create a file named /etc/modprobe.d/blacklist-amd_sfh.conf with the following content:

   blacklist amd_sfh
   

2. Regenerate the initramfs to ensure the blacklist is applied during boot:

   sudo dracut -f -v
   # OR for Ubuntu/Debian based systems:
   # sudo update-initramfs -u
   

3. Reboot the system for the changes to take effect.

This mitigation may impact functionality that relies on the AMD Sensor Fusion Hub. A system reboot is required for the changes to take effect.