What’s Vulnerable › Vulnerabilities
CVE-2024-26922: drm/amdgpu: validate the parameters of bo mapping operations more clearly
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-04-23 · updated 2026-08-04
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more clearly Verify the parameters of amdgpu_vm_bo_(map/replace_map/clearing_mappings) in one common place.
Affected products
- Debian Linux: 10.0
- Fedoraproject Fedora: 38, 39, 40
- Linux kernel: from 4.12 before 4.19.313; from 4.20 before 5.4.275; from 5.5 before 5.10.216; from 5.11 before 5.15.157; from 5.16 before 6.1.88; from 6.2 before 6.6.29 — fixed in 4.19.313, 5.10.216, 5.15.157, 5.4.275, 6.1.88, 6.6.29
How to fix
Upgrade to a fixed version: Linux kernel 4.19.313, 5.10.216, 5.15.157, 5.4.275. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/1fd7db5c16028dc07b2ceec190f2e895dddb532d
- https://git.kernel.org/stable/c/212e3baccdb1939606420d88f7f52d346b49a284
- https://git.kernel.org/stable/c/6fef2d4c00b5b8561ad68dd2b68173f5c6af1e75
- https://git.kernel.org/stable/c/8b12fc7b032633539acdf7864888b0ebd49e90f2
- https://git.kernel.org/stable/c/b1f04b9b1c5317f562a455384c5f7473e46bdbaa
- https://git.kernel.org/stable/c/d4da6b084f1c5625937d49bb6722c5b4aef11b8d
- https://git.kernel.org/stable/c/ef13eeca7c79136bc38e21eb67322c1cbd5c40ee
- https://git.kernel.org/stable/c/f68039375d4d6d67303674c0ab2d06b7295c0ec9
- https://git.kernel.org/stable/c/1fd7db5c16028dc07b2ceec190f2e895dddb532d
- https://git.kernel.org/stable/c/212e3baccdb1939606420d88f7f52d346b49a284
- https://git.kernel.org/stable/c/6fef2d4c00b5b8561ad68dd2b68173f5c6af1e75
- https://git.kernel.org/stable/c/8b12fc7b032633539acdf7864888b0ebd49e90f2
Get alerted when CVE-2024-26922 or the next vulnerability affects your stack