CVE-2024-35817

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35817
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag Otherwise after the GTT bo is released, the GTT and gart space is freed but amdgpu_ttm_backend_unbind will not clear the gart page table entry and leave valid mapping entry pointing to the stale system page. Then if GPU access the gart address mistakely, it will read undefined value instead page fault, harder to debug and reproduce the real issue.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/589c414138a1bed98e652c905937d8f790804efe Patch
https://git.kernel.org/stable/c/5cdce3dda3b3dacde902f63a8ee72c2b7f91912d Patch
https://git.kernel.org/stable/c/5d5f1a7f3b1039925f79c7894f153c2a905201fb Patch
https://git.kernel.org/stable/c/6c6064cbe58b43533e3451ad6a8ba9736c109ac3 Patch
https://git.kernel.org/stable/c/6fcd12cb90888ef2d8af8d4c04e913252eee4ef3 Patch
https://git.kernel.org/stable/c/e8d27caef2c829a306e1f762fb95f06e8ec676f6 Patch
https://git.kernel.org/stable/c/589c414138a1bed98e652c905937d8f790804efe Patch
https://git.kernel.org/stable/c/5cdce3dda3b3dacde902f63a8ee72c2b7f91912d Patch
https://git.kernel.org/stable/c/5d5f1a7f3b1039925f79c7894f153c2a905201fb Patch
https://git.kernel.org/stable/c/6c6064cbe58b43533e3451ad6a8ba9736c109ac3 Patch
https://git.kernel.org/stable/c/6fcd12cb90888ef2d8af8d4c04e913252eee4ef3 Patch
https://git.kernel.org/stable/c/e8d27caef2c829a306e1f762fb95f06e8ec676f6 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Sep 2025, 14:55

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/589c414138a1bed98e652c905937d8f790804efe - () https://git.kernel.org/stable/c/589c414138a1bed98e652c905937d8f790804efe - Patch
References () https://git.kernel.org/stable/c/5cdce3dda3b3dacde902f63a8ee72c2b7f91912d - () https://git.kernel.org/stable/c/5cdce3dda3b3dacde902f63a8ee72c2b7f91912d - Patch
References () https://git.kernel.org/stable/c/5d5f1a7f3b1039925f79c7894f153c2a905201fb - () https://git.kernel.org/stable/c/5d5f1a7f3b1039925f79c7894f153c2a905201fb - Patch
References () https://git.kernel.org/stable/c/6c6064cbe58b43533e3451ad6a8ba9736c109ac3 - () https://git.kernel.org/stable/c/6c6064cbe58b43533e3451ad6a8ba9736c109ac3 - Patch
References () https://git.kernel.org/stable/c/6fcd12cb90888ef2d8af8d4c04e913252eee4ef3 - () https://git.kernel.org/stable/c/6fcd12cb90888ef2d8af8d4c04e913252eee4ef3 - Patch
References () https://git.kernel.org/stable/c/e8d27caef2c829a306e1f762fb95f06e8ec676f6 - () https://git.kernel.org/stable/c/e8d27caef2c829a306e1f762fb95f06e8ec676f6 - Patch

21 Nov 2024, 09:20

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/amdgpu: amdgpu_ttm_gart_bind establece el indicador vinculado a gtt. De lo contrario, después de que se libera GTT bo, se libera el espacio GTT y gart, pero amdgpu_ttm_backend_unbind no borrará la entrada de la tabla de páginas de gart y dejará una asignación válida. entrada que apunta a la página del sistema obsoleto. Luego, si la GPU accede a la dirección de Gart por error, leerá un valor indefinido en lugar de un error de página, lo que será más difícil de depurar y reproducir el problema real.
References () https://git.kernel.org/stable/c/589c414138a1bed98e652c905937d8f790804efe - () https://git.kernel.org/stable/c/589c414138a1bed98e652c905937d8f790804efe -
References () https://git.kernel.org/stable/c/5cdce3dda3b3dacde902f63a8ee72c2b7f91912d - () https://git.kernel.org/stable/c/5cdce3dda3b3dacde902f63a8ee72c2b7f91912d -
References () https://git.kernel.org/stable/c/5d5f1a7f3b1039925f79c7894f153c2a905201fb - () https://git.kernel.org/stable/c/5d5f1a7f3b1039925f79c7894f153c2a905201fb -
References () https://git.kernel.org/stable/c/6c6064cbe58b43533e3451ad6a8ba9736c109ac3 - () https://git.kernel.org/stable/c/6c6064cbe58b43533e3451ad6a8ba9736c109ac3 -
References () https://git.kernel.org/stable/c/6fcd12cb90888ef2d8af8d4c04e913252eee4ef3 - () https://git.kernel.org/stable/c/6fcd12cb90888ef2d8af8d4c04e913252eee4ef3 -
References () https://git.kernel.org/stable/c/e8d27caef2c829a306e1f762fb95f06e8ec676f6 - () https://git.kernel.org/stable/c/e8d27caef2c829a306e1f762fb95f06e8ec676f6 -

17 May 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 14:15

Updated : 2025-09-26 14:55

NVD link : CVE-2024-35817

Mitre link : CVE-2024-35817

CVE.ORG link : CVE-2024-35817

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo