CVE-2024-26986

2024-05-0100:00:00

ubuntu.com

linux kernel

vulnerability

memory leak

create_process

drm/amdkfd

gpu reset

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix memory leak in create_process failure Fix memory leak due
to a leaked mmget reference on an error handling code path that is
triggered when attempting to create KFD processes while a GPU reset is in
progress.

OSVersionArchitecturePackageVersionFilename
ubuntu24.04noarchlinux< 6.8.0-38.38UNKNOWN
ubuntu24.04noarchlinux-aws< 6.8.0-1011.12UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< anyUNKNOWN
ubuntu24.04noarchlinux-azure< 6.8.0-1010.10UNKNOWN
ubuntu22.04noarchlinux-azure-6.5< anyUNKNOWN
ubuntu24.04noarchlinux-gcp< 6.8.0-1010.11UNKNOWN
ubuntu22.04noarchlinux-gcp-6.5< anyUNKNOWN
ubuntu24.04noarchlinux-gke< 6.8.0-1006.9UNKNOWN
ubuntu24.04noarchlinux-ibm< 6.8.0-1008.8UNKNOWN
ubuntu24.04noarchlinux-intel< 6.8.0-1007.14UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	24.04	noarch	linux	< 6.8.0-38.38	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< 6.8.0-1011.12	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< any	UNKNOWN
ubuntu	24.04	noarch	linux-azure	< 6.8.0-1010.10	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.5	< any	UNKNOWN
ubuntu	24.04	noarch	linux-gcp	< 6.8.0-1010.11	UNKNOWN
ubuntu	22.04	noarch	linux-gcp-6.5	< any	UNKNOWN
ubuntu	24.04	noarch	linux-gke	< 6.8.0-1006.9	UNKNOWN
ubuntu	24.04	noarch	linux-ibm	< 6.8.0-1008.8	UNKNOWN
ubuntu	24.04	noarch	linux-intel	< 6.8.0-1007.14	UNKNOWN