drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() The "instance" variable needs to be signed for the error handling to work.
References
- https://git.kernel.org/stable/c/3dd9734878a9042f0358301d19a2b006a0fc4d06
- https://git.kernel.org/stable/c/a5224e2123ce21102f346f518db80f004d5053a7
- https://git.kernel.org/stable/c/544fa213f15d27f0370795845d55eeb3e00080d2
- https://git.kernel.org/stable/c/e8dfbf83a82bbfb9680921719fbe65e535af59ea
- https://git.kernel.org/stable/c/4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287
- https://git.kernel.org/stable/c/d347c9a398bf7eab9408d207c0a50fb720f9de7d
- https://git.kernel.org/stable/c/298e2ce222e712ffafa47288c5b2fcf33d72fda3
- https://git.kernel.org/stable/c/6769a23697f17f9bf9365ca8ed62fe37e361a05a
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2024-39371
- GCVE · GCVE-0-2024-41022
CERT-FR advisories
- CERTFR-2025-AVI-0677 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0022 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0002 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2024-AVI-1080 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-1013 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0997 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0957 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0840 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0822 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0779 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0719 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4.278 < 5.4.281cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.219 < 5.10.223cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.161 < 5.15.164cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.94 < 6.1.102cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.34 < 6.6.43cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.9.5 < 6.9.12cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.10 < 6.10.2
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 5594971e02764aa1c8210ffb838cb4e7897716e8 < 3dd9734878a9042f0358301d19a2b006a0fc4d06 ; affected 8112fa72b7f139052843ff484130d6f97e9f052f < a5224e2123ce21102f346f518db80f004d5053a7 ; affected ea906e9ac61e3152bef63597f2d9f4a812fc346a < 544fa213f15d27f0370795845d55eeb3e00080d2 ; affected 011552f29f20842c9a7a21bffe1f6a2d6457ba46 < e8dfbf83a82bbfb9680921719fbe65e535af59ea ; affected 5b0a3dc3e87821acb80e841b464d335aff242691 < 4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287 ; affected 0964c84b93db7fbf74f357c1e20957850e092db3 < d347c9a398bf7eab9408d207c0a50fb720f9de7d |
| Linux · Linux | affected 6.10 ; unaffected 0 < 6.10 ; unaffected 5.4.281 ≤ 5.4.* ; unaffected 5.10.223 ≤ 5.10.* ; unaffected 5.15.164 ≤ 5.15.* ; unaffected 6.1.102 ≤ 6.1.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |