CVE-2024-41011: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-18 · updated 2026-08-04
Weakness: CWE-682

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages We don't get the right offset in that case. The GPU has an unused 4K area of the register BAR space into which you can remap registers. We remap the HDP flush registers into this space to allow userspace (CPU or GPU) to flush the HDP when it updates VRAM. However, on systems with >4K pages, we end up exposing PAGE_SIZE of MMIO space.

Affected products

Linux kernel: from 5.3 before 5.4.283; from 5.5 before 5.10.225; from 5.11 before 5.15.166; from 5.16 before 6.1.91; from 6.7 before 6.8.10; 6.9-rc1, 6.9-rc2, 6.9-rc3, 6.9-rc4, 6.9-rc5, 6.9-rc6 (+1) — fixed in 5.10.225, 5.15.166, 5.4.283, 6.1.91, 6.8.10

How to fix

Upgrade to a fixed version: Linux kernel 5.10.225, 5.15.166, 5.4.283, 6.1.91. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-41011 or the next vulnerability affects your stack