CVE - CVE-2024-46896

CVE-ID
CVE-2024-46896	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't access invalid sched Since 2320c9e6a768 ("drm/sched: memset() 'job' in drm_sched_job_init()") accessing job->base.sched can produce unexpected results as the initialisation of (*job)->base.sched done in amdgpu_job_alloc is overwritten by the memset. This commit fixes an issue when a CS would fail validation and would be rejected after job->num_ibs is incremented. In this case, amdgpu_ib_free(ring->adev, ...) will be called, which would crash the machine because the ring value is bogus. To fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this because the device is actually not used in this function. The next commit will remove the ring argument completely. (cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/65501a4fd84ecdc0af863dbb37759242aab9f2dd URL:https://git.kernel.org/stable/c/65501a4fd84ecdc0af863dbb37759242aab9f2dd MISC:https://git.kernel.org/stable/c/67291d601f2b032062b1b2f60ffef1b63e10094c URL:https://git.kernel.org/stable/c/67291d601f2b032062b1b2f60ffef1b63e10094c MISC:https://git.kernel.org/stable/c/a93b1020eb9386d7da11608477121b10079c076a URL:https://git.kernel.org/stable/c/a93b1020eb9386d7da11608477121b10079c076a MISC:https://git.kernel.org/stable/c/da6b2c626ae73c303378ce9eaf6e3eaf16c9925a URL:https://git.kernel.org/stable/c/da6b2c626ae73c303378ce9eaf6e3eaf16c9925a
Assigning CNA
kernel.org
Date Record Created
20250111	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250111)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)