GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-46803 (GCVE-0-2024-46803)

Vulnerability from cvelistv5 – Published: 2024-09-27 12:35 – Updated: 2026-08-05 11:38
VLAI
Title
drm/amdkfd: Check debug trap enable before write dbg_ev_file
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check debug trap enable before write dbg_ev_file In interrupt context, write dbg_ev_file will be run by work queue. It will cause write dbg_ev_file execution after debug_trap_disable, which will cause NULL pointer access. v2: cancel work "debug_event_workarea" before set dbg_ev_file as NULL.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-29 14:20 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 , < e6ea3b8fe398915338147fe54dd2db8155fdafd8 (git)
Affected: 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 , < 820dcbd38a77bd5fdc4236d521c1c122841227d0 (git)
Affected: 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 , < 547033b593063eb85bfdf9b25a5f1b8fd1911be2 (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.5
Unaffected: 0 , < 6.5 (semver)
Unaffected: 6.6.50 , ≤ 6.6.* (semver)
Unaffected: 6.10.9 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-46803",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-29T14:20:52.974033Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-29T14:21:05.556Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdkfd/kfd_debug.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e6ea3b8fe398915338147fe54dd2db8155fdafd8",
              "status": "affected",
              "version": "0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508",
              "versionType": "git"
            },
            {
              "lessThan": "820dcbd38a77bd5fdc4236d521c1c122841227d0",
              "status": "affected",
              "version": "0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508",
              "versionType": "git"
            },
            {
              "lessThan": "547033b593063eb85bfdf9b25a5f1b8fd1911be2",
              "status": "affected",
              "version": "0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdkfd/kfd_debug.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.5"
            },
            {
              "lessThan": "6.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.50",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.50",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.9",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Check debug trap enable before write dbg_ev_file\n\nIn interrupt context, write dbg_ev_file will be run by work queue. It\nwill cause write dbg_ev_file execution after debug_trap_disable, which\nwill cause NULL pointer access.\nv2: cancel work \"debug_event_workarea\" before set dbg_ev_file as NULL."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached through the AMDKFD_IOC_DBG_TRAP ioctl on the /dev/kfd character device (and the process-teardown path), requiring local access to the machine. No network or remote protocol handling is involved.\nAC:L - The attacker controls both sides of the race: they flood debug exceptions by submitting shaders that raise SQ traps/bad opcodes/memory violations (queuing the work item from GPU IRQ) while concurrently issuing KFD_IOC_DBG_TRAP_DISABLE in a loop, and can retry indefinitely until the window is hit.\nPR:L - Only an unprivileged local account with access to /dev/kfd is needed \u2014 kfd_open() performs no capability check and the ptrace_parent() gate in kfd_ioctl_set_debug_trap() is bypassed entirely when a process debugs itself (target == p). ROCm systems ship /dev/kfd world- or render-group-accessible, so any local user on an AMD GPU compute node qualifies.\nUI:N - The attacking process performs every step itself \u2014 enabling debug trap, submitting the faulting GPU work, and disabling the trap. No victim action or interaction is required.\nS:U - The corruption and its consequences are confined to the kernel of the same host; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - After fput() drops the last reference, the worker uses a dangling struct file from the filp slab cache, and an attacker who reclaims that object controls the f_op table used by kernel_write \u2014 a use-after-free that can be leveraged into arbitrary kernel memory disclosure.\nI:H - __kernel_write_iter() indirectly calls file-\u003ef_op-\u003ewrite_iter() on the freed struct file, giving a direct control-flow-hijack primitive once the attacker sprays the reclaimed filp object, which translates into arbitrary kernel write and privilege escalation.\nA:H - The commonly observed outcome is a NULL pointer dereference in kernel_write() from a kworker context, oopsing the kernel; the use-after-free variant likewise crashes the machine, and the attacker can trigger it repeatedly."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:38:41.734Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e6ea3b8fe398915338147fe54dd2db8155fdafd8"
        },
        {
          "url": "https://git.kernel.org/stable/c/820dcbd38a77bd5fdc4236d521c1c122841227d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/547033b593063eb85bfdf9b25a5f1b8fd1911be2"
        }
      ],
      "title": "drm/amdkfd: Check debug trap enable before write dbg_ev_file",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-46803",
    "datePublished": "2024-09-27T12:35:49.185Z",
    "dateReserved": "2024-09-11T15:12:18.281Z",
    "dateUpdated": "2026-08-05T11:38:41.734Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-46803",
      "date": "2026-09-16",
      "epss": "0.00271",
      "percentile": "0.19455"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.6.50\", \"matchCriteriaId\": \"FAE86900-6239-4D0C-B6C0-70BF7C6BA610\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.10.9\", \"matchCriteriaId\": \"F4469C96-A86B-4CC3-B2D5-C21B6B72641B\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amdkfd: Check debug trap enable before write dbg_ev_file\\n\\nIn interrupt context, write dbg_ev_file will be run by work queue. It\\nwill cause write dbg_ev_file execution after debug_trap_disable, which\\nwill cause NULL pointer access.\\nv2: cancel work \\\"debug_event_workarea\\\" before set dbg_ev_file as NULL.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: comprobar la habilitaci\\u00f3n de la trampa de depuraci\\u00f3n antes de escribir dbg_ev_file En el contexto de interrupci\\u00f3n, la cola de trabajo ejecutar\\u00e1 la escritura dbg_ev_file. Esto provocar\\u00e1 la ejecuci\\u00f3n de la escritura dbg_ev_file despu\\u00e9s de debug_trap_disable, lo que provocar\\u00e1 el acceso al puntero NULL. v2: cancelar el trabajo \\\"debug_event_workarea\\\" antes de establecer dbg_ev_file como NULL.\"}]",
      "id": "CVE-2024-46803",
      "lastModified": "2024-10-04T17:45:16.867",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-09-27T13:15:13.570",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/547033b593063eb85bfdf9b25a5f1b8fd1911be2\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/820dcbd38a77bd5fdc4236d521c1c122841227d0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e6ea3b8fe398915338147fe54dd2db8155fdafd8\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-46803\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-09-27T13:15:13.570\",\"lastModified\":\"2026-08-04T11:20:27.920\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amdkfd: Check debug trap enable before write dbg_ev_file\\n\\nIn interrupt context, write dbg_ev_file will be run by work queue. It\\nwill cause write dbg_ev_file execution after debug_trap_disable, which\\nwill cause NULL pointer access.\\nv2: cancel work \\\"debug_event_workarea\\\" before set dbg_ev_file as NULL.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: comprobar la habilitaci\u00f3n de la trampa de depuraci\u00f3n antes de escribir dbg_ev_file En el contexto de interrupci\u00f3n, la cola de trabajo ejecutar\u00e1 la escritura dbg_ev_file. Esto provocar\u00e1 la ejecuci\u00f3n de la escritura dbg_ev_file despu\u00e9s de debug_trap_disable, lo que provocar\u00e1 el acceso al puntero NULL. v2: cancelar el trabajo \\\"debug_event_workarea\\\" antes de establecer dbg_ev_file como NULL.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdkfd/kfd_debug.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508\",\"lessThan\":\"e6ea3b8fe398915338147fe54dd2db8155fdafd8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508\",\"lessThan\":\"820dcbd38a77bd5fdc4236d521c1c122841227d0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508\",\"lessThan\":\"547033b593063eb85bfdf9b25a5f1b8fd1911be2\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdkfd/kfd_debug.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.50\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.9\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-29T14:20:52.974033Z\",\"id\":\"CVE-2024-46803\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.6.50\",\"matchCriteriaId\":\"FAE86900-6239-4D0C-B6C0-70BF7C6BA610\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.9\",\"matchCriteriaId\":\"F4469C96-A86B-4CC3-B2D5-C21B6B72641B\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/547033b593063eb85bfdf9b25a5f1b8fd1911be2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/820dcbd38a77bd5fdc4236d521c1c122841227d0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e6ea3b8fe398915338147fe54dd2db8155fdafd8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T09:15:49+00:00",
      "cve": "CVE-2024-46803",
      "id": "CVE-2024-46803",
      "initial_release_date": "2024-09-27T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/amdkfd: Check debug trap enable before write dbg_ev_file",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-46803.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-30T02:24:15Z",
      "cve": "CVE-2024-46803",
      "id": "CVE-2024-46803",
      "initial_release_date": "2024-09-28T02:52:27Z",
      "product_status:known_affected": "394",
      "product_status:known_not_affected": "345",
      "product_status:recommended": "361",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-46803",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-46803.json",
      "version": "54"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-46803\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-29T14:20:52.974033Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-29T14:20:54.435Z\"}}], \"cna\": {\"title\": \"drm/amdkfd: Check debug trap enable before write dbg_ev_file\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508\", \"lessThan\": \"e6ea3b8fe398915338147fe54dd2db8155fdafd8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508\", \"lessThan\": \"820dcbd38a77bd5fdc4236d521c1c122841227d0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508\", \"lessThan\": \"547033b593063eb85bfdf9b25a5f1b8fd1911be2\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/gpu/drm/amd/amdkfd/kfd_debug.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.5\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.5\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.6.50\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.9\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/gpu/drm/amd/amdkfd/kfd_debug.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e6ea3b8fe398915338147fe54dd2db8155fdafd8\"}, {\"url\": \"https://git.kernel.org/stable/c/820dcbd38a77bd5fdc4236d521c1c122841227d0\"}, {\"url\": \"https://git.kernel.org/stable/c/547033b593063eb85bfdf9b25a5f1b8fd1911be2\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amdkfd: Check debug trap enable before write dbg_ev_file\\n\\nIn interrupt context, write dbg_ev_file will be run by work queue. It\\nwill cause write dbg_ev_file execution after debug_trap_disable, which\\nwill cause NULL pointer access.\\nv2: cancel work \\\"debug_event_workarea\\\" before set dbg_ev_file as NULL.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.50\", \"versionStartIncluding\": \"6.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.9\", \"versionStartIncluding\": \"6.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"6.5\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:36:50.768Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-46803\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:36:50.768Z\", \"dateReserved\": \"2024-09-11T15:12:18.281Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-09-27T12:35:49.185Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.