PT-2024-26787

CVE-2024-35931

·

Published

2024-01-10

·

Updated

2026-10-18

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-92-generic
Description The vulnerability is related to the Linux kernel's handling of PCI error slot resets during RAS recovery. The PCI error slot reset may be triggered after injecting UE to UMC multiple times, causing a system hang. The issue is caused by the amdgpu ras do recovery function not properly handling the PCI error slot reset, leading to a general protection fault.
Technical details about exploitation include:
  • Function Names: The amdgpu ras do recovery function is vulnerable.
  • Vulnerable Parameters or Variables: The pci status variable is involved in the vulnerability.
Recommendations To resolve the issue, update the Linux kernel to version 5.15.0-92-generic or later. This update includes the fix for the drm/amdgpu vulnerability, which skips the PCI error slot reset during RAS recovery.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
AZL-62607
AZL-67749
ECHO-0548-6D7C-C1E7
INFSA-2024_9315
OESA-2024-1941
OESA-2024-1942
OESA-2024-1943
RHSA-2024:9315
RHSA-2024_9315
SUSE-SU-2024:2135-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6893-1
USN-6893-2
USN-6893-3
USN-6918-1
Found an issue in the description? Have something to add? Feel free to write us 👾