In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: once more fix the call oder in amdgputtmmove() v2
This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available any more.
Some fixes were suggested, but essentially we should call the move notification before actually moving things because only this way we have the correct order for DMA-buf and VM move notifications as well.
Also rework the statistic handling so that we don't update the eviction counter before the move.
v2: add missing NULL check
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27400.json"
}[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288064914666871801041250394210689750834",
"236118181234105004788640292035600293789",
"113636086272831003870659714273942586595",
"310571730722651067681368846540384849883"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a4f6e138720b6e9adf7b82a71d0292f3f276480",
"deprecated": false,
"id": "CVE-2024-27400-0dee00cc",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.h"
},
"signature_version": "v1"
},
{
"digest": {
"length": 72.0,
"function_hash": "62682807302355469631123214330670517046"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3a9331a6591e9df64791e076f6591f440af51c3",
"deprecated": false,
"id": "CVE-2024-27400-28f9e1b8",
"signature_type": "Function",
"target": {
"function": "amdgpu_bo_delete_mem_notify",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2334.0,
"function_hash": "267419960840645227416226430303729685837"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a4f6e138720b6e9adf7b82a71d0292f3f276480",
"deprecated": false,
"id": "CVE-2024-27400-3827c3f6",
"signature_type": "Function",
"target": {
"function": "amdgpu_bo_move",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2334.0,
"function_hash": "267419960840645227416226430303729685837"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3a9331a6591e9df64791e076f6591f440af51c3",
"deprecated": false,
"id": "CVE-2024-27400-3ebc3686",
"signature_type": "Function",
"target": {
"function": "amdgpu_bo_move",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"158890678187201578912349751698489526307",
"194253516895220434976652271255946722516",
"96364970769872543589620558691759722529",
"210378291464971980493838435712618133290",
"148771686574984729927839643472695093547",
"131620355009756356254580764043489537580",
"267657051938743726835472690918993116858",
"281630590959849308648314451296144543086",
"210454745375520086710758878707503521440",
"78901898663689375568172822687318308140",
"256043841874051204577345038072290088327",
"314048955701661748087225677416123652600",
"215485189455660008355284394476201110519",
"199246262325308960545910211968385064487",
"3514145568142710988651525397078861569",
"50712335067438982196860909993204223942",
"48914167789844219931368112005936361028",
"299608749481537338015801129892463736246",
"288229093539484987221079775057223507414",
"277628049113593489613651729880732068012",
"258474982099879490535162616147148905402",
"160811397219695393823772579177885857167",
"338391901211033729033171040659326340339",
"158455947550574363509435134241984408084",
"23218478816349282796205025930477439431",
"173748145332685671959941326306415958434",
"137842104304503154670881968331918682097",
"234007007879025133040153713453723502426",
"297137712849899522946211185339807220923",
"330058424145248302589109028817100728007",
"148708279135601880809397782326675449416",
"257224532842614265614435861967363705381",
"86536179301448322983062772036729526961",
"18914991322906033052141404319860805697",
"111945522380647591348518856717922807454",
"302462382986772191715754068827009571367",
"169583952431778815348107322036205928627",
"78706494019469697751444833377314131338",
"251449494178786004610238993069496083907",
"5320025681022830051856706271265035265",
"326033309476265748425503446153881261542",
"186653621563652033317058486057757038122",
"15697255651582760864768161284326102866",
"236199239447397316971313839594825373355",
"85699605873634845104331906452557256719",
"213619475151648866863072173684565713372",
"195557481172838192363746544664288616060",
"213379412863055889352158161027541172411",
"29278548552057852446073776674470741923",
"106112182979775048197611473205178494173",
"232994587327452965188592170073854072132",
"151154456677480564319411858904919150831",
"279298825491010893916454692479976499014"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3a9331a6591e9df64791e076f6591f440af51c3",
"deprecated": false,
"id": "CVE-2024-27400-5c442589",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"158890678187201578912349751698489526307",
"194253516895220434976652271255946722516",
"96364970769872543589620558691759722529",
"210378291464971980493838435712618133290",
"148771686574984729927839643472695093547",
"131620355009756356254580764043489537580",
"267657051938743726835472690918993116858",
"281630590959849308648314451296144543086",
"210454745375520086710758878707503521440",
"78901898663689375568172822687318308140",
"256043841874051204577345038072290088327",
"314048955701661748087225677416123652600",
"215485189455660008355284394476201110519",
"199246262325308960545910211968385064487",
"3514145568142710988651525397078861569",
"50712335067438982196860909993204223942",
"48914167789844219931368112005936361028",
"299608749481537338015801129892463736246",
"288229093539484987221079775057223507414",
"277628049113593489613651729880732068012",
"258474982099879490535162616147148905402",
"160811397219695393823772579177885857167",
"338391901211033729033171040659326340339",
"158455947550574363509435134241984408084",
"23218478816349282796205025930477439431",
"173748145332685671959941326306415958434",
"137842104304503154670881968331918682097",
"234007007879025133040153713453723502426",
"297137712849899522946211185339807220923",
"330058424145248302589109028817100728007",
"148708279135601880809397782326675449416",
"257224532842614265614435861967363705381",
"86536179301448322983062772036729526961",
"18914991322906033052141404319860805697",
"111945522380647591348518856717922807454",
"302462382986772191715754068827009571367",
"169583952431778815348107322036205928627",
"78706494019469697751444833377314131338",
"251449494178786004610238993069496083907",
"5320025681022830051856706271265035265",
"326033309476265748425503446153881261542",
"186653621563652033317058486057757038122",
"15697255651582760864768161284326102866",
"236199239447397316971313839594825373355",
"85699605873634845104331906452557256719",
"213619475151648866863072173684565713372",
"195557481172838192363746544664288616060",
"213379412863055889352158161027541172411",
"29278548552057852446073776674470741923",
"106112182979775048197611473205178494173",
"232994587327452965188592170073854072132",
"151154456677480564319411858904919150831",
"279298825491010893916454692479976499014"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a4f6e138720b6e9adf7b82a71d0292f3f276480",
"deprecated": false,
"id": "CVE-2024-27400-95bfca61",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 72.0,
"function_hash": "62682807302355469631123214330670517046"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a4f6e138720b6e9adf7b82a71d0292f3f276480",
"deprecated": false,
"id": "CVE-2024-27400-b2750ee4",
"signature_type": "Function",
"target": {
"function": "amdgpu_bo_delete_mem_notify",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 441.0,
"function_hash": "235945145453892494680422359777409999030"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a4f6e138720b6e9adf7b82a71d0292f3f276480",
"deprecated": false,
"id": "CVE-2024-27400-b2b6ddb3",
"signature_type": "Function",
"target": {
"function": "amdgpu_bo_move_notify",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"321764929072574563067618061613432708108",
"220728902874775610044189289538614122572",
"281028323561824483938040951368686358096",
"265237985097453270461682971896898521726",
"142177243319892491306028904810609381221",
"4687542867028746460969670765430894474",
"304080287848279347467505503764786279659",
"240695655462620762761511657434022157138",
"50724918392484784725397075613682140695",
"108216695892102463938615696274378516850",
"223930300443365426036143237184533394501",
"228200030737436933443951189405437880388",
"339177626034607916018384894481152918615"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a4f6e138720b6e9adf7b82a71d0292f3f276480",
"deprecated": false,
"id": "CVE-2024-27400-b6d21a8e",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 441.0,
"function_hash": "235945145453892494680422359777409999030"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3a9331a6591e9df64791e076f6591f440af51c3",
"deprecated": false,
"id": "CVE-2024-27400-d9b2b693",
"signature_type": "Function",
"target": {
"function": "amdgpu_bo_move_notify",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"321764929072574563067618061613432708108",
"220728902874775610044189289538614122572",
"281028323561824483938040951368686358096",
"265237985097453270461682971896898521726",
"142177243319892491306028904810609381221",
"4687542867028746460969670765430894474",
"304080287848279347467505503764786279659",
"240695655462620762761511657434022157138",
"50724918392484784725397075613682140695",
"108216695892102463938615696274378516850",
"223930300443365426036143237184533394501",
"228200030737436933443951189405437880388",
"339177626034607916018384894481152918615"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3a9331a6591e9df64791e076f6591f440af51c3",
"deprecated": false,
"id": "CVE-2024-27400-e3212a4f",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288064914666871801041250394210689750834",
"236118181234105004788640292035600293789",
"113636086272831003870659714273942586595",
"310571730722651067681368846540384849883"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3a9331a6591e9df64791e076f6591f440af51c3",
"deprecated": false,
"id": "CVE-2024-27400-efdb3a08",
"signature_type": "Line",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.h"
},
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27400.json"