CVE-2024-27400

MEDIUM

Linux Kernel 5.15.149-5.16 - Use-After-Free in amdgpu_ttm_move()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 This reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap. The basic problem here is that after the move the old location is simply not available any more. Some fixes were suggested, but essentially we should call the move notification before actually moving things because only this way we have the correct order for DMA-buf and VM move notifications as well. Also rework the statistic handling so that we don't update the eviction counter before the move. v2: add missing NULL check

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 0.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (20)
fedoraproject/fedora 39
fedoraproject/fedora 40
Linux/Linux < 6.8
Linux/Linux 1cd2b612474c07b17a21e27f2eed8dff75cb5057
Linux/Linux 5.15.149 - 5.16
Linux/Linux 6.1.77 - 6.1.91
Linux/Linux 6.1.91 - 6.1.*
Linux/Linux 6.6.16 - 6.6.31
Linux/Linux 6.6.31 - 6.6.*
Linux/Linux 6.7.4 - 6.8
... and 10 more
Published May 14, 2024
Tracked Since Feb 18, 2026