CVE-2024-36949

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36949
In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one device doing reset in parallel, the first device will call kfd_suspend_all_processes() to evict all processes on all devices, this call takes time to finish. other device will start reset and recover without waiting. if the process has not been evicted before doing recover, it will be restored, then caused page fault.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/b6f6626528fe724b512c34f3fb5946c36a135f58 Patch
https://git.kernel.org/stable/c/d06af584be5a769d124b7302b32a033e9559761d Patch
https://git.kernel.org/stable/c/ed28ef3840bbf93a64376ea7814ce39f86352e14 Patch
https://git.kernel.org/stable/c/b6f6626528fe724b512c34f3fb5946c36a135f58 Patch
https://git.kernel.org/stable/c/d06af584be5a769d124b7302b32a033e9559761d Patch
https://git.kernel.org/stable/c/ed28ef3840bbf93a64376ea7814ce39f86352e14 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
History

01 Oct 2025, 14:17

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/b6f6626528fe724b512c34f3fb5946c36a135f58 - () https://git.kernel.org/stable/c/b6f6626528fe724b512c34f3fb5946c36a135f58 - Patch
References () https://git.kernel.org/stable/c/d06af584be5a769d124b7302b32a033e9559761d - () https://git.kernel.org/stable/c/d06af584be5a769d124b7302b32a033e9559761d - Patch
References () https://git.kernel.org/stable/c/ed28ef3840bbf93a64376ea7814ce39f86352e14 - () https://git.kernel.org/stable/c/ed28ef3840bbf93a64376ea7814ce39f86352e14 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
CWE NVD-CWE-Other

21 Nov 2024, 09:22

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/b6f6626528fe724b512c34f3fb5946c36a135f58 - () https://git.kernel.org/stable/c/b6f6626528fe724b512c34f3fb5946c36a135f58 -
References () https://git.kernel.org/stable/c/d06af584be5a769d124b7302b32a033e9559761d - () https://git.kernel.org/stable/c/d06af584be5a769d124b7302b32a033e9559761d -
References () https://git.kernel.org/stable/c/ed28ef3840bbf93a64376ea7814ce39f86352e14 - () https://git.kernel.org/stable/c/ed28ef3840bbf93a64376ea7814ce39f86352e14 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: amd/amdkfd: sincroniza todos los dispositivos para esperar a que se desalojen todos los procesos. Si hay más de un dispositivo reiniciando en paralelo, el primer dispositivo llamará a kfd_suspend_all_processes() para desalojar todos los procesos en todos los dispositivos, esta llamada tarda un tiempo en finalizar. El otro dispositivo comenzará a restablecerse y recuperarse sin esperar. Si el proceso no ha sido desalojado antes de realizar la recuperación, se restaurará y luego provocará un error de página.

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-10-01 14:17

NVD link : CVE-2024-36949

Mitre link : CVE-2024-36949

CVE.ORG link : CVE-2024-36949

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other