PT-2024-5418

CVE-2024-38581

·

Published

2024-04-23

·

Updated

2026-10-18

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a use-after-free problem in the amdgpu driver, specifically in the amdgpu mes remove ring() function. This could potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is fixed by deleting the fence fallback timer to resolve the random use-after-free issue.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2024:7000
ALSA-2024:7001
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-10855
ALT-PU-2024-11524
ALT-PU-2024-13979
ALT-PU-2024-14046
CESA-2024_7000
CESA-2024_7001
CLSA-2024-1725871927
INFSA-2024_7000
INFSA-2024_7001
INFSA-2024_9315
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1863
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
RHSA-2024:7000
RHSA-2024_7000
RHSA-2024:7001
RHSA-2024_7001
RHSA-2024:9315
RHSA-2024_9315
RHSA-2025:4342
RLSA-2024:7001
SUSE-SU-2024:2372-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
Found an issue in the description? Have something to add? Feel free to write us 👾