Revert "drm/amd: flush any delayed gfxoff on suspend entry" (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 6 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: flush any delayed gfxoff on suspend entry" commit ab4750332dbe ("drm/amdgpu/sdma5.2: add begin/end_use ring callbacks") caused GFXOFF control to be used more heavily and the codepath that was removed from commit 0dee72639533 ("drm/amd: flush any delayed gfxoff on suspend entry") now can be exercised at suspend again. Users report that by using GNOME to suspend the lockscreen trigger will cause SDMA traffic and the system can deadlock. This reverts commit 0dee726395333fea833eaaf838bc80962df886c8.
Weaknesses (CWE)
- CWE-667 — Improper Locking
References
- https://git.kernel.org/stable/c/65158edb0a3a8df23197d52cd24287e39eaf95d6
- https://git.kernel.org/stable/c/ff70e6ff6fc2413caf33410af7462d1f584d927e
- https://git.kernel.org/stable/c/caa2565a2e13899be31f7b1e069e6465d3e2adb0
- https://git.kernel.org/stable/c/d855ceb6a5fde668c5431156bc60fae0cc52b764
- https://git.kernel.org/stable/c/916361685319098f696b798ef1560f69ed96e934
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2024-24178
- GCVE · GCVE-0-2024-26916
CERT-FR advisories
- CERTFR-2024-AVI-0667 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0633 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0611 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0526 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0496 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0456 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0439 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0422 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0383 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.144 < 5.15.149cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.69 < 6.1.79cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.8 < 6.6.18cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7.1 < 6.7.6cpe:2.3:o:linux:linux_kernel:6.7:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc7:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.7:rc8:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected f94942885e8416ce9de84d8fae93684002682b5d < 65158edb0a3a8df23197d52cd24287e39eaf95d6 ; affected 78b2ba39beef21c8baebb1868569c2026ad76de0 < ff70e6ff6fc2413caf33410af7462d1f584d927e ; affected 3aae4ef4d799fb3d0381157640fdb251008cf0ae < caa2565a2e13899be31f7b1e069e6465d3e2adb0 ; affected ab4750332dbe535243def5dcebc24ca00c1f98ac < d855ceb6a5fde668c5431156bc60fae0cc52b764 ; affected ab4750332dbe535243def5dcebc24ca00c1f98ac < 916361685319098f696b798ef1560f69ed96e934 ; affected 5.15.144 < 5.15.149 |
| Linux · Linux | affected 6.7 ; unaffected 0 < 6.7 ; unaffected 5.15.149 ≤ 5.15.* ; unaffected 6.1.79 ≤ 6.1.* ; unaffected 6.6.18 ≤ 6.6.* ; unaffected 6.7.6 ≤ 6.7.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |