Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
The function atomctrl_get_smc_sclk_range_table() does not check the return value of smu_atom_get_data_table(). If smu_atom_get_data_table() fails to retrieve SMU_Info table, it returns NULL which is later dereferenced.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
In practice this should never happen as this code only gets called on polaris chips and the vbios data table will always be present on those chips.
Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , Debian 10 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
- Affected packages:
- kernel @ 4.18.0 (+11 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| AlmaLinux 9.6 ESU | Released |
10 kernels
|
| Debian 11 | Released |
34 kernels
|
| Debian 11 cloud | Released |
14 kernels
|
| Debian 12 | Planned | — |
| Proxmox VE 7 5.15 | Released |
47 kernels
|
| Ubuntu 18.04 AWS Focal | Released |
56 kernels
|
| Ubuntu 18.04 HWE Focal | Released |
69 kernels
|
| Ubuntu 20.04 | Released |
126 kernels
|
| Ubuntu 20.04 AWS | Released |
108 kernels
|
| Ubuntu 20.04 Azure | Released |
99 kernels
|
| Ubuntu 20.04 GCP | Ready For Release | — |
| Ubuntu 20.04 HWE AWS | Released |
56 kernels
|
| Ubuntu 20.04 HWE Azure | Released |
39 kernels
|
| Ubuntu 22.04 | Released |
73 kernels
|
| Ubuntu 22.04 AWS | Released |
64 kernels
|
| Ubuntu 22.04 Azure | Released |
60 kernels
|
| Ubuntu 24.04 | Released |
25 kernels
|
| Ubuntu 24.04 AWS | Planned | — |