In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
We don't get the right offset in that case. The GPU has an unused 4K area of the register BAR space into which you can remap registers. We remap the HDP flush registers into this space to allow userspace (CPU or GPU) to flush the HDP when it updates VRAM. However, on systems with >4K pages, we end up exposing PAGE_SIZE of MMIO space.
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2477.0,
"function_hash": "148338608512578687660067277804693911250"
},
"id": "CVE-2024-41011-0908c2c6",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_ioctl_alloc_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"191281118086488840599818173780859633839",
"242207925739642988130936173079891863625",
"224388810390554231875704036110817238038",
"158745614680670818449698404517494519655",
"264538734363076980491348760852877234285",
"88888833777260779350198377802632803481",
"247970776614786209335294988528355124606"
]
},
"id": "CVE-2024-41011-127200ea",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 790.0,
"function_hash": "13205407029700738070013369938150798060"
},
"id": "CVE-2024-41011-35c38ecb",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_mmio_mmap"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1984.0,
"function_hash": "147195105718322529335578854354104039994"
},
"id": "CVE-2024-41011-46541689",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "criu_restore_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"53877070728321225611235196427122550392",
"121577784165147536236816403344544892338",
"161487441743810418761542215002567600802",
"317680843711168311571426295011669945770",
"264538734363076980491348760852877234285",
"88888833777260779350198377802632803481",
"247970776614786209335294988528355124606"
]
},
"id": "CVE-2024-41011-5d7ab4a8",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7276cdc1912325b64c33fcb1361952c06e55f63",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"279869800053158290821130107635078929344",
"283136802063970751010683576431455547263",
"154218660261956404716025642732149289262",
"317680843711168311571426295011669945770",
"244464576155035101539686798347796833332",
"250215007003170846905393954651288694989",
"33639489811497800661885264237877376915",
"298492128613941032089182288156242233291",
"82618273235823423293883384478965608619",
"307467833906456695610854490333758873384",
"66956679258079157547236578047305110640"
]
},
"id": "CVE-2024-41011-60e8214c",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 790.0,
"function_hash": "13205407029700738070013369938150798060"
},
"id": "CVE-2024-41011-61ccb43a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_mmio_mmap"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1596.0,
"function_hash": "311542166862117692719889554606468620724"
},
"id": "CVE-2024-41011-6397c881",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_ioctl_alloc_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"279869800053158290821130107635078929344",
"283136802063970751010683576431455547263",
"154218660261956404716025642732149289262",
"317680843711168311571426295011669945770",
"244464576155035101539686798347796833332",
"250215007003170846905393954651288694989",
"33639489811497800661885264237877376915",
"298492128613941032089182288156242233291",
"82618273235823423293883384478965608619",
"307467833906456695610854490333758873384",
"66956679258079157547236578047305110640"
]
},
"id": "CVE-2024-41011-64d8de92",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1984.0,
"function_hash": "147195105718322529335578854354104039994"
},
"id": "CVE-2024-41011-6d08d3e9",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "criu_restore_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 790.0,
"function_hash": "13205407029700738070013369938150798060"
},
"id": "CVE-2024-41011-7c1eb394",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_mmio_mmap"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2823.0,
"function_hash": "119469853277926499792134807310305396098"
},
"id": "CVE-2024-41011-85971e03",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_ioctl_alloc_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1727.0,
"function_hash": "67260149033847925924787900398598203329"
},
"id": "CVE-2024-41011-875bd526",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7276cdc1912325b64c33fcb1361952c06e55f63",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_ioctl_alloc_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"53877070728321225611235196427122550392",
"121577784165147536236816403344544892338",
"161487441743810418761542215002567600802",
"317680843711168311571426295011669945770",
"264538734363076980491348760852877234285",
"88888833777260779350198377802632803481",
"247970776614786209335294988528355124606"
]
},
"id": "CVE-2024-41011-8c833b1a",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad4838040e5515939c071a0f511ce2661a0889d",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 800.0,
"function_hash": "273603578235697340419367905634496996944"
},
"id": "CVE-2024-41011-8ded06df",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_mmio_mmap"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1984.0,
"function_hash": "147195105718322529335578854354104039994"
},
"id": "CVE-2024-41011-8ebd94f8",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "criu_restore_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1977.0,
"function_hash": "116717297230274835288799022195343995011"
},
"id": "CVE-2024-41011-96165781",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "criu_restore_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"279869800053158290821130107635078929344",
"283136802063970751010683576431455547263",
"154218660261956404716025642732149289262",
"317680843711168311571426295011669945770",
"244464576155035101539686798347796833332",
"250215007003170846905393954651288694989",
"33639489811497800661885264237877376915",
"298492128613941032089182288156242233291",
"82618273235823423293883384478965608619",
"122135798286264486396070333045791577304",
"267612808325266705214987711704781619533"
]
},
"id": "CVE-2024-41011-a87a6ffc",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"279869800053158290821130107635078929344",
"283136802063970751010683576431455547263",
"154218660261956404716025642732149289262",
"317680843711168311571426295011669945770",
"244464576155035101539686798347796833332",
"250215007003170846905393954651288694989",
"33639489811497800661885264237877376915",
"298492128613941032089182288156242233291",
"82618273235823423293883384478965608619",
"307467833906456695610854490333758873384",
"66956679258079157547236578047305110640"
]
},
"id": "CVE-2024-41011-c4782973",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 800.0,
"function_hash": "201802492402534673983873241326846130818"
},
"id": "CVE-2024-41011-cac005ea",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7276cdc1912325b64c33fcb1361952c06e55f63",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_mmio_mmap"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2823.0,
"function_hash": "119469853277926499792134807310305396098"
},
"id": "CVE-2024-41011-dbccbfed",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_ioctl_alloc_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 800.0,
"function_hash": "201802492402534673983873241326846130818"
},
"id": "CVE-2024-41011-e2b09aa0",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad4838040e5515939c071a0f511ce2661a0889d",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_mmio_mmap"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2823.0,
"function_hash": "119469853277926499792134807310305396098"
},
"id": "CVE-2024-41011-f39c1dd9",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_ioctl_alloc_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1751.0,
"function_hash": "185675762006906157099830299134249730990"
},
"id": "CVE-2024-41011-f5adbfe5",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad4838040e5515939c071a0f511ce2661a0889d",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_ioctl_alloc_memory_of_gpu"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 790.0,
"function_hash": "252457185779218980627973885040505131252"
},
"id": "CVE-2024-41011-f726e649",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28",
"target": {
"file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
"function": "kfd_mmio_mmap"
}
}
]