CVE-2024-46803
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Sep 27, 2024
Updated: Oct 4, 2024
CWE ID 476
Summary
CVE-2024-46803 is a vulnerability affecting the Linux kernel. In particular, an issue was discovered in the drm/amdkfd driver. In interrupt context, the write dbg_ev_file function is executed by a work queue. However, the function check for debug trap enable is not performed before writing dbg_ev_file. This can result in the execution of write dbg_ev_file after debug_trap_disable, leading to a NULL pointer access. The issue has been resolved by cancelling the "debug_event_workarea" work before setting dbg_ev_file as NULL.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.