Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's AMD GPU driver has been addressed, which involved improperly exposing VRAM-related attributes in the sysfs filesystem for GPUs that do not have VRAM. This misconfiguration could lead to a system crash when these attributes were accessed. The issue has been resolved by modifying the visibility of the VRAM attributes, ensuring they are only accessible on GPUs that actually contain VRAM.
The vulnerability could cause a system crash by accessing VRAM attributes on GPUs without VRAM.
The vulnerability could be reproduced by accessing the VRAM sysfs attributes of an AMD GPU that does not have VRAM. This access would lead to a crash, demonstrating the issue.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the updated kernel can be found on the official Linux kernel website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.