CVE-2024-27400 drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

2024-05-1310:26:13

Linux

www.cve.org

linux kernel

vulnerability

cve-2024-27400

drm

amdgpu_ttm_move

call order

fix

ftrace event

location

move notification

dma-buf

vm move

notification

statistic handling

eviction counter

null check

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

This reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move
on same heap. The basic problem here is that after the move the old
location is simply not available any more.

Some fixes were suggested, but essentially we should call the move
notification before actually moving things because only this way we have
the correct order for DMA-buf and VM move notifications as well.

Also rework the statistic handling so that we don’t update the eviction
counter before the move.

v2: add missing NULL check

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c",
      "drivers/gpu/drm/amd/amdgpu/amdgpu_object.h",
      "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
    ],
    "versions": [
      {
        "version": "d443fb67ca5a",
        "lessThan": "5c25b169f9a0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e7a0ee45c653",
        "lessThan": "0c7ed3ed35ee",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "94aeb4117343",
        "lessThan": "9a4f6e138720",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "94aeb4117343",
        "lessThan": "d3a9331a6591",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c",
      "drivers/gpu/drm/amd/amdgpu/amdgpu_object.h",
      "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
    ],
    "versions": [
      {
        "version": "6.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.8",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.91",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.31",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.10",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]