CVE-2024-26986

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26986
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leak in create_process failure Fix memory leak due to a leaked mmget reference on an error handling code path that is triggered when attempting to create KFD processes while a GPU reset is in progress.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0dcd876411644da98a6b4d5a18d32ca94c15bdb5 Patch
https://git.kernel.org/stable/c/18921b205012568b45760753ad3146ddb9e2d4e2 Patch
https://git.kernel.org/stable/c/aa02d43367a9adf8c85fb382fea4171fb266c8d0 Patch
https://git.kernel.org/stable/c/0dcd876411644da98a6b4d5a18d32ca94c15bdb5 Patch
https://git.kernel.org/stable/c/18921b205012568b45760753ad3146ddb9e2d4e2 Patch
https://git.kernel.org/stable/c/aa02d43367a9adf8c85fb382fea4171fb266c8d0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
History

21 Nov 2024, 09:03

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0dcd876411644da98a6b4d5a18d32ca94c15bdb5 - Patch () https://git.kernel.org/stable/c/0dcd876411644da98a6b4d5a18d32ca94c15bdb5 - Patch
References () https://git.kernel.org/stable/c/18921b205012568b45760753ad3146ddb9e2d4e2 - Patch () https://git.kernel.org/stable/c/18921b205012568b45760753ad3146ddb9e2d4e2 - Patch
References () https://git.kernel.org/stable/c/aa02d43367a9adf8c85fb382fea4171fb266c8d0 - Patch () https://git.kernel.org/stable/c/aa02d43367a9adf8c85fb382fea4171fb266c8d0 - Patch

23 May 2024, 19:14

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
First Time Fedoraproject
Fedoraproject fedora
Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/0dcd876411644da98a6b4d5a18d32ca94c15bdb5 - () https://git.kernel.org/stable/c/0dcd876411644da98a6b4d5a18d32ca94c15bdb5 - Patch
References () https://git.kernel.org/stable/c/18921b205012568b45760753ad3146ddb9e2d4e2 - () https://git.kernel.org/stable/c/18921b205012568b45760753ad3146ddb9e2d4e2 - Patch
References () https://git.kernel.org/stable/c/aa02d43367a9adf8c85fb382fea4171fb266c8d0 - () https://git.kernel.org/stable/c/aa02d43367a9adf8c85fb382fea4171fb266c8d0 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401

13 May 2024, 08:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

03 May 2024, 03:16

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/ -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/amdkfd: corrige la pérdida de memoria en el error create_process. Corrige la pérdida de memoria debido a una referencia mmget filtrada en una ruta de código de manejo de errores que se activa al intentar crear procesos KFD mientras se reinicia la GPU. Está en proceso.

01 May 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 06:15

Updated : 2024-11-21 09:03

NVD link : CVE-2024-26986

Mitre link : CVE-2024-26986

CVE.ORG link : CVE-2024-26986

JSON object : View

Products Affected

linux

  • linux_kernel

fedoraproject

  • fedora
CWE
CWE-401

Missing Release of Memory after Effective Lifetime