Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2024-53108: Linux kernel AMD display driver may cause memory crash
CVE-2024-53108 · published 1 year ago
Summary
The Linux kernel’s AMD graphics driver could read memory outside its limits, potentially leading to a system crash or instability. This happens when a certain display identification check is performed. Updating to the latest kernel version that includes the fix resolves the issue.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update debian rootio-linux to version 6.1.176-1.root.io.157.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update debian rootio-linux to version 5.10.257-1.root.io.100.
- Update debian linux to version 6.11.10-1.
- Update canonical linux-aws-6.8 to version 6.8.0-1027.29~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1027.32~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1028.30~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-58.60~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1024.24~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-58.60.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1026.29~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1024.25~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-58.60.1~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1020.21~22.04.1.
- Update canonical linux to version 6.8.0-58.60.
- Update canonical linux-aws to version 6.8.0-1027.29.
- Update canonical linux-azure to version 6.8.0-1027.32.
- Update canonical linux-azure-6.11 to version 6.11.0-1012.12~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1014.15.
- Update canonical linux-gcp to version 6.8.0-1028.30.
- Update canonical linux-gcp-6.11 to version 6.11.0-1011.11~24.04.1.
- Update canonical linux-gke to version 6.8.0-1023.27.
- Update canonical linux-gkeop to version 6.8.0-1010.12.
- Update canonical linux-ibm to version 6.8.0-1024.24.
- Update canonical linux-lowlatency to version 6.8.0-58.60.1.
- Update canonical linux-nvidia to version 6.8.0-1026.29.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1007.7.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1026.29.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1008.8.
- Update canonical linux-oem-6.11 to version 6.11.0-1015.15.
- Update canonical linux-oem-6.8 to version 6.8.0-1026.26.
- Update canonical linux-oracle to version 6.8.0-1024.25.
- Update canonical linux-raspi to version 6.8.0-1028.32.
- Update canonical linux-riscv to version 6.8.0-58.60.1.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-raspi-realtime to version 6.8.0-2023.24.
- Update canonical linux-realtime to version 6.8.1-1020.21.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update linux kernel to version 6.11.10.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux linux to version 0a326fbc8f72a320051f27328d4d4e7abdfe68d7 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 < 6.1.176-1.root.io.157 Fix: upgrade to 6.1.159-1.root.io.75
|
| – | linux | linux |
< 0a326fbc8f72a320051f27328d4d4e7abdfe68d7 6.6 |
| – | linux | linux_kernel |
< 6.6.63 >= 6.7, < 6.11.10 6.12 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 < 5.10.257-1.root.io.100 Fix: upgrade to 5.10.247-1.root.io.42
|
| Debian:13 | debian | linux |
< 6.11.10-1 Fix: upgrade to 6.11.10-1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
Showing 50 of 119. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1027.29~22.04.1 Fix: upgrade to 6.8.0-1027.29~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1027.32~22.04.1 Fix: upgrade to 6.8.0-1027.32~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1028.30~22.04.1 Fix: upgrade to 6.8.0-1028.30~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-58.60~22.04.1 Fix: upgrade to 6.8.0-58.60~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1024.24~22.04.1 Fix: upgrade to 6.8.0-1024.24~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-58.60.1~22.04.1 Fix: upgrade to 6.8.0-58.60.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1026.29~22.04.1 Fix: upgrade to 6.8.0-1026.29~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1024.25~22.04.1 Fix: upgrade to 6.8.0-1024.25~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-58.60.1~22.04.1 Fix: upgrade to 6.8.0-58.60.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1020.21~22.04.1 Fix: upgrade to 6.8.1-1020.21~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-58.60 Fix: upgrade to 6.8.0-58.60
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1027.29 Fix: upgrade to 6.8.0-1027.29
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1027.32 Fix: upgrade to 6.8.0-1027.32
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1012.12~24.04.1 Fix: upgrade to 6.11.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1014.15 Fix: upgrade to 6.8.0-1014.15
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1028.30 Fix: upgrade to 6.8.0-1028.30
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1011.11~24.04.1 Fix: upgrade to 6.11.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1023.27 Fix: upgrade to 6.8.0-1023.27
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1010.12 Fix: upgrade to 6.8.0-1010.12
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1024.24 Fix: upgrade to 6.8.0-1024.24
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-58.60.1 Fix: upgrade to 6.8.0-58.60.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1026.29 Fix: upgrade to 6.8.0-1026.29
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1007.7 Fix: upgrade to 6.11.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1026.29.1 Fix: upgrade to 6.8.0-1026.29.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1015.15 Fix: upgrade to 6.11.0-1015.15
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1026.26 Fix: upgrade to 6.8.0-1026.26
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1024.25 Fix: upgrade to 6.8.0-1024.25
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1028.32 Fix: upgrade to 6.8.0-1028.32
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-58.60.1 Fix: upgrade to 6.8.0-58.60.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2023.24 Fix: upgrade to 6.8.0-2023.24
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1020.21 Fix: upgrade to 6.8.1-1020.21
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Linux | linux | kernel |
>= 6.7.0, < 6.11.10 Fix: upgrade to 6.11.10
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2024-53108 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN: [ 27.804016] BUG: KASAN: slab-out-of-bounds in amdgpu_dm_update_freesync_caps+0xefa/0x17a0 [amdgpu] [ 27.804788] Read of size 1 at addr ffff8881647fdb00 by task systemd-udevd/383 ... [ 27.821207] Memory state around the buggy address: [ 27.821215] ffff8881647fda00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.821224] ffff8881647fda80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.821234] >ffff8881647fdb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.821243] ^ [ 27.821250] ffff8881647fdb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.821259] ffff8881647fdc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.821268] ================================================================== This is caused because the ID extraction happens outside of the range of the edid lenght. This commit addresses this issue by considering the amd_vsdb_block size. (cherry picked from commit b7e381b1ccd5e778e3d9c44c669ad38439a861d8)
References
- https://ubuntu.com/security/CVE-2024-53108 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-53108 Third Party Advisory
- https://git.kernel.org/linus/16dd2825c23530f2259fc671960a3a65d2af69bd Third Party Advisory
- https://ubuntu.com/security/notices/USN-7276-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7277-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7310-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7449-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7450-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7451-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7452-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7453-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7449-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7468-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7523-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7524-1 Vendor Advisory
- https://git.kernel.org/stable/c/0a326fbc8f72a320051f27328d4d4e7abdfe68d7 URL
- https://git.kernel.org/stable/c/16dd2825c23530f2259fc671960a3a65d2af69bd URL
- https://security-tracker.debian.org/tracker/CVE-2024-53108 Vendor Advisory
- https://git.kernel.org/stable/c/8db867061f4c76505ad62422b65d666b45289217 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53108... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-53108 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-125Out-of-bounds Read
Timeline
Published2 Dec 2024
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2024-53108 · MITRE
CVE-2024-53108 · NVD
DEBIAN-CVE-2024-53108 · OSV
UBUNTU-CVE-2024-53108 · OSV
CVE-2024-53108 · OSV
Track software like this
Free during beta