CVE-2024-50282

A flaw was found in the Linux kernel's AMD GPU driver. A local user with administrative privileges could trigger a buffer overflow by requesting an oversized read operation through the debugfs interface. This vulnerability could lead to memory corruption, potentially causing a system crash and resulting in a denial of service (DoS).

This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the amdgpu kernel module from loading if AMD graphics hardware is not required:

1. Create a configuration file to prevent the module from loading:

echo "install amdgpu /bin/true" > /etc/modprobe.d/disable-amdgpu.conf

2. Unload the module if it is currently loaded into memory:

modprobe -r amdgpu

Warning: Disabling the amdgpu module will disable AMD graphics hardware support and any GPU acceleration relying on this driver. A system reboot may be required if the module cannot be dynamically unloaded.