Threats tagged 'ghsa-cmxf-xmv7-xjq8'

CVE-2024-26656 is a use-after-free vulnerability in the AMDGPU DRM driver of the Linux kernel. It occurs when an invalid address and size are passed to the amdgpu_gem_userptr_ioctl interface, leading to improper handling in the amdgpu_hmm_register and amdgpu_hmm_unregister functions. This results in access to freed memory, causing a kernel crash or denial of service. The issue was reported by Joonkyo Jung and affects AMDGPU on any ASICs. The vulnerability has a medium severity with a CVSS score of 5.5 and does not impact confidentiality or integrity but causes availability disruption. No known exploits are reported in the wild. No specific affected versions or patches are provided in the data.