NULL pointer dereference in Linux kernel - CVE-2024-26657

Vulnerability identifier: #VU88146

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-26657

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in drivers/gpu/drm/scheduler/sched_entity.c. A local user can send an amdgpu_cs_wait_ioctl to the AMDGPU DRM driver on any ASICs with valid context and perform a denial of service (DoS) attack.

Linux kernel
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Real Time Module
SUSE Linux Enterprise Live Patching
Public Cloud Module
openSUSE Leap
Ubuntu
Fedora
ThinkSystem SR655 V3
ThinkStation P520 Workstation
ThinkStation P520c Workstation
ThinkStation P620 Workstation
ThinkStation P720 Workstation
ThinkStation P920 Workstation
ThinkSystem SR650 V2
ThinkSystem SR650 V3
ThinkSystem SR655
ThinkStation P358 Workstation
ThinkSystem SR665
ThinkSystem SR665 V3
ThinkSystem SR670 V2
ThinkSystem SR675 V3
ThinkSystem SR685a V3
ThinkSystem SR850 V3
ThinkSystem SR860 V3
ThinkStation P350 Workstation
ThinkStation P340 Workstation
PowerEdge XE9680
PowerEdge R750XA
PowerEdge R760xa
PowerEdge R7625
PowerEdge R7615
AMD Graphics Processing Unit (GPU) Adapter Linux Driver
AMD Graphics Driver for Linux®
PowerEdge R7525
PowerEdge R7515
kernel-livepatch-6_4_0-150600_10_5-rt-debuginfo
kernel-livepatch-SLE15-SP6-RT_Update_1-debugsource
kernel-livepatch-6_4_0-150600_10_5-rt
kernel-syms-azure
gfs2-kmp-azure-debuginfo
kernel-azure-debuginfo
kernel-azure-devel-debuginfo
cluster-md-kmp-azure-debuginfo
kselftests-kmp-azure-debuginfo
gfs2-kmp-azure
ocfs2-kmp-azure-debuginfo
kernel-azure-optional
dlm-kmp-azure
dlm-kmp-azure-debuginfo
kernel-azure-extra-debuginfo
kernel-azure-devel
cluster-md-kmp-azure
kernel-azure-livepatch-devel
ocfs2-kmp-azure
reiserfs-kmp-azure-debuginfo
kernel-azure-debugsource
kselftests-kmp-azure
kernel-azure-optional-debuginfo
kernel-azure
kernel-azure-vdso-debuginfo
kernel-azure-vdso
kernel-devel-azure
kernel-source-azure
reiserfs-kmp-azure
kernel-azure-extra
kernel-rt_debug-devel
kselftests-kmp-rt-debuginfo
reiserfs-kmp-rt-debuginfo
kernel-rt_debug-debugsource
cluster-md-kmp-rt-debuginfo
kernel-rt_debug-vdso
kernel-rt-vdso
kernel-rt-devel-debuginfo
gfs2-kmp-rt-debuginfo
kernel-rt-devel
kernel-rt-vdso-debuginfo
kernel-rt_debug-devel-debuginfo
ocfs2-kmp-rt
kselftests-kmp-rt
kernel-rt_debug-debuginfo
kernel-rt_debug-vdso-debuginfo
kernel-rt-livepatch-devel
kernel-rt-optional-debuginfo
dlm-kmp-rt
kernel-rt-extra
dlm-kmp-rt-debuginfo
kernel-rt-debugsource
kernel-syms-rt
kernel-rt-optional
ocfs2-kmp-rt-debuginfo
kernel-devel-rt
kernel-source-rt
kernel-rt_debug
kernel-rt
reiserfs-kmp-rt
cluster-md-kmp-rt
kernel-rt-extra-debuginfo
gfs2-kmp-rt
kernel-rt-debuginfo
kernel-rt_debug-livepatch-devel
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-generic-64k-hwe-24.04 (Ubuntu package)
linux-image-generic-hwe-24.04 (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-virtual-hwe-24.04 (Ubuntu package)
linux-image-6.8.0-35-lowlatency (Ubuntu package)
linux-image-6.8.0-35-generic-64k (Ubuntu package)
linux-image-6.8.0-35-generic (Ubuntu package)
linux-image-6.8.0-35-lowlatency-64k (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-6.8.0-1004-gke (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-6.8.0-1005-raspi (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-6.8.0-1006-oem (Ubuntu package)
linux-image-6.8.0-1006-ibm (Ubuntu package)
linux-image-6.8.0-1006-oracle (Ubuntu package)
linux-image-6.8.0-1006-oracle-64k (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-ibm-lts-24.04 (Ubuntu package)
linux-image-ibm-classic (Ubuntu package)
linux-image-oem-24.04a (Ubuntu package)
linux-image-oem-24.04 (Ubuntu package)
linux-image-6.8.0-1008-azure (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-6.8.0-1008-azure-fde (Ubuntu package)
kernel
kernel-headers

Install updates from vendor's website.

Linux kernel - update to 6.8.3
PowerEdge XE9680 - update to A00
AMD Graphics Processing Unit (GPU) Adapter Linux Driver - update to ROCM 6.2.0
PowerEdge R750XA - update to 1.0
PowerEdge R760xa - update to 1.0
PowerEdge R7525 - update to 1.0
PowerEdge R7515 - update to 1.0
PowerEdge R7625 - update to 1.0
PowerEdge R7615 - update to 1.0
kernel-livepatch-6_4_0-150600_10_5-rt-debuginfo - update to 1-150600.1.5.1
kernel-livepatch-SLE15-SP6-RT_Update_1-debugsource - update to 1-150600.1.5.1
kernel-livepatch-6_4_0-150600_10_5-rt - update to 1-150600.1.5.1
kernel-syms-azure - update to 6.4.0-150600.8.5.1
gfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-devel-debuginfo - update to 6.4.0-150600.8.5.4
cluster-md-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kselftests-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
gfs2-kmp-azure - update to 6.4.0-150600.8.5.4
ocfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-optional - update to 6.4.0-150600.8.5.4
dlm-kmp-azure - update to 6.4.0-150600.8.5.4
dlm-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-extra-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-devel - update to 6.4.0-150600.8.5.4
cluster-md-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-azure-livepatch-devel - update to 6.4.0-150600.8.5.4
ocfs2-kmp-azure - update to 6.4.0-150600.8.5.4
reiserfs-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-debugsource - update to 6.4.0-150600.8.5.4
kselftests-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-azure-optional-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure - update to 6.4.0-150600.8.5.4
kernel-azure-vdso-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-vdso - update to 6.4.0-150600.8.5.4
kernel-devel-azure - update to 6.4.0-150600.8.5.4
kernel-source-azure - update to 6.4.0-150600.8.5.4
reiserfs-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-azure-extra - update to 6.4.0-150600.8.5.4
kernel-rt_debug-devel - update to 6.4.0-150600.10.5.1
kselftests-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
reiserfs-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-debugsource - update to 6.4.0-150600.10.5.1
cluster-md-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-vdso - update to 6.4.0-150600.10.5.1
kernel-rt-vdso - update to 6.4.0-150600.10.5.1
kernel-rt-devel-debuginfo - update to 6.4.0-150600.10.5.1
gfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-devel - update to 6.4.0-150600.10.5.1
kernel-rt-vdso-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-devel-debuginfo - update to 6.4.0-150600.10.5.1
ocfs2-kmp-rt - update to 6.4.0-150600.10.5.1
kselftests-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-vdso-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-livepatch-devel - update to 6.4.0-150600.10.5.1
kernel-rt-optional-debuginfo - update to 6.4.0-150600.10.5.1
dlm-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt-extra - update to 6.4.0-150600.10.5.1
dlm-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-debugsource - update to 6.4.0-150600.10.5.1
kernel-syms-rt - update to 6.4.0-150600.10.5.1
kernel-rt-optional - update to 6.4.0-150600.10.5.1
ocfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-devel-rt - update to 6.4.0-150600.10.5.1
kernel-source-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug - update to 6.4.0-150600.10.5.1
kernel-rt - update to 6.4.0-150600.10.5.1
reiserfs-kmp-rt - update to 6.4.0-150600.10.5.1
cluster-md-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt-extra-debuginfo - update to 6.4.0-150600.10.5.1
gfs2-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-livepatch-devel - update to 6.4.0-150600.10.5.1
linux-image-generic-lpae (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-64k (Ubuntu package) - update to 6.8.0-35.35
linux-image-kvm (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-64k-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-virtual (Ubuntu package) - update to 6.8.0-35.35
linux-image-virtual-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-6.8.0-35-lowlatency (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-6.8.0-35-generic-64k (Ubuntu package) - update to 6.8.0-35.35+1
linux-image-6.8.0-35-generic (Ubuntu package) - update to 6.8.0-35.35+1
linux-image-6.8.0-35-lowlatency-64k (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-lowlatency-64k (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-lowlatency (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-6.8.0-1004-gke (Ubuntu package) - update to 6.8.0-1004.7
linux-image-gke (Ubuntu package) - update to 6.8.0-1004.7
linux-image-raspi (Ubuntu package) - update to 6.8.0-1005.5
linux-image-6.8.0-1005-raspi (Ubuntu package) - update to 6.8.0-1005.5
linux-image-ibm (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oem (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-ibm (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oracle (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oracle-64k (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oracle (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oracle-64k (Ubuntu package) - update to 6.8.0-1006.6
linux-image-ibm-lts-24.04 (Ubuntu package) - update to 6.8.0-1006.6
linux-image-ibm-classic (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oem-24.04a (Ubuntu package) - update to 6.8.0-1006.6+1
linux-image-oem-24.04 (Ubuntu package) - update to 6.8.0-1006.6+1
linux-image-6.8.0-1008-azure (Ubuntu package) - update to 6.8.0-1008.8
linux-image-azure-fde (Ubuntu package) - update to 6.8.0-1008.8
linux-image-azure (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-azure-fde (Ubuntu package) - update to 6.8.0-1008.8
kernel - update to 6.8.3-200.fc39
kernel-headers - update to 6.8.3-200.fc39
AMD Graphics Driver for Linux® - update to 24.30.2

• https://git.kernel.org/stable/c/f34e8bb7d6c6626933fe993e03ed59ae85e16abb
• https://git.kernel.org/stable/c/74cd204c7afe498aa9dcc3ebf0ecac53d477a429
• https://git.kernel.org/stable/c/54b5b7275dfdec35812ccce70930cd7c4ee612b2
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8.3

• NULL pointer dereference in Linux kernel drm scheduler
• Fedora 39 update for kernel, kernel-headers
• Ubuntu update for linux
• Ubuntu update for linux-oem-6.8
• Ubuntu update for linux-azure
• Ubuntu update for linux-oracle
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Lenovo update for AMD Graphics driver for Linux
• Dell update for AMD-based GPU vulnerabilities