CVE-2024-56695

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56695

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' The `kfd_get_cu_occupancy` function previously declared a large `cu_occupancy` array as a local variable, which could lead to stack overflows due to excessive stack usage. This commit replaces the static array allocation with dynamic memory allocation using `kcalloc`, thereby reducing the stack size. This change avoids the risk of stack overflows in kernel space, in scenarios where `AMDGPU_MAX_QUEUES` is large. The allocated memory is freed using `kfree` before the function returns to prevent memory leaks. Fixes the below with gcc W=1: drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_process.c: In function ‘kfd_get_cu_occupancy’: drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_process.c:322:1: warning: the frame size of 1056 bytes is larger than 1024 bytes [-Wframe-larger-than=] 322 | } | ^

References
Link Resource
https://git.kernel.org/stable/c/6d9f07196389f35a3afebcf1a12c1425725caddd Mailing List Patch
https://git.kernel.org/stable/c/922f0e00017b09d9d47e3efac008c8b20ed546a0 Mailing List Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

01 Oct 2025, 20:17

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/6d9f07196389f35a3afebcf1a12c1425725caddd - Patch, Mailing List () https://git.kernel.org/stable/c/6d9f07196389f35a3afebcf1a12c1425725caddd - Mailing List, Patch
References () https://git.kernel.org/stable/c/922f0e00017b09d9d47e3efac008c8b20ed546a0 - Patch, Mailing List () https://git.kernel.org/stable/c/922f0e00017b09d9d47e3efac008c8b20ed546a0 - Mailing List, Patch

05 Mar 2025, 18:53

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: Uso de asignación dinámica para la matriz de ocupación de CU en 'kfd_get_cu_occupancy()' La función `kfd_get_cu_occupancy` declaró anteriormente una matriz `cu_occupancy` grande como una variable local, lo que podría provocar desbordamientos de pila debido al uso excesivo de la pila. Esta confirmación reemplaza la asignación de matriz estática con asignación de memoria dinámica utilizando `kcalloc`, lo que reduce el tamaño de la pila. Este cambio evita el riesgo de desbordamientos de pila en el espacio del kernel, en escenarios donde `AMDGPU_MAX_QUEUES` es grande. La memoria asignada se libera utilizando `kfree` antes de que la función regrese para evitar fugas de memoria. Corrige lo siguiente con gcc W=1: drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_process.c: En la función 'kfd_get_cu_occupancy': drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_process.c:322:1: advertencia: el tamaño del marco de 1056 bytes es mayor que 1024 bytes [-Wframe-larger-than=] 322 | } | ^
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-787
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/6d9f07196389f35a3afebcf1a12c1425725caddd - () https://git.kernel.org/stable/c/6d9f07196389f35a3afebcf1a12c1425725caddd - Patch, Mailing List
References () https://git.kernel.org/stable/c/922f0e00017b09d9d47e3efac008c8b20ed546a0 - () https://git.kernel.org/stable/c/922f0e00017b09d9d47e3efac008c8b20ed546a0 - Patch, Mailing List
First Time Linux
Linux linux Kernel

28 Dec 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-28 10:15

Updated : 2025-10-01 20:17

NVD link : CVE-2024-56695

Mitre link : CVE-2024-56695

CVE.ORG link : CVE-2024-56695

JSON object : View

Products Affected

linux

CWE
CWE-787

Out-of-bounds Write