What’s Vulnerable › Vulnerabilities

CVE-2024-42123: drm/amdgpu: fix double free err_addr pointer warnings

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-30 · updated 2026-10-30
• Weakness: CWE-415

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages will be run many times so that double free err_addr in some special case. So set the err_addr to NULL to avoid the warnings.

Affected products

• Linux kernel: through 6.9.9
• Linux: 4.2 — fixed in 6.10

How to fix

Upgrade to a fixed version: Linux 6.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1eb6c4a0d83d1f348d718f813706105eff8cfc74
• https://git.kernel.org/stable/c/506c245f3f1cd989cb89811a7f06e04ff8813a0d
• https://git.kernel.org/stable/c/8e24beb3c2b08a4763f920399a9cc577ed440a1a
• https://git.kernel.org/stable/c/e4233036eaa4c6a4087e42bb18bc853b4b5fab3b
• https://git.kernel.org/stable/c/506c245f3f1cd989cb89811a7f06e04ff8813a0d
• https://git.kernel.org/stable/c/8e24beb3c2b08a4763f920399a9cc577ed440a1a

Get alerted when CVE-2024-42123 or the next vulnerability affects your stack