Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Linux Kernel: Memory Leaks in AMD Display Driver
published 1 year ago
Summary
The Linux kernel's AMD display driver has a bug that can cause memory leaks or crashes. This is fixed in a recent update, so you should make sure your system is up to date to avoid any issues. If you're using an older version, you should update as soon as possible.
What to do
- Update linux kernel to version 6.12.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Linux | linux | kernel |
>= 4.15.0, < 6.12.4 Fix: upgrade to 6.12.4
|
Original advisory text
drm/amd/display: Fix handling of plane refcount
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix handling of plane refcount
[Why]
The mechanism to backup and restore plane states doesn't maintain
refcount, which can cause issues if the refcount of the plane changes
in between backup and restore operations, such as memory leaks if the
refcount was supposed to go down, or double frees / invalid memory
accesses if the refcount was supposed to go up.
[How]
Cache and re-apply current refcount when restoring plane states.
drm/amd/display: Fix handling of plane refcount
[Why]
The mechanism to backup and restore plane states doesn't maintain
refcount, which can cause issues if the refcount of the plane changes
in between backup and restore operations, such as memory leaks if the
refcount was supposed to go down, or double frees / invalid memory
accesses if the refcount was supposed to go up.
[How]
Cache and re-apply current refcount when restoring plane states.
References
- https://git.kernel.org/stable/c/27227a234c1487cb7a684615f0749c455218833a URL
- https://git.kernel.org/stable/c/8cb2f6793845f135b28361ba8e96901cae3e5790 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56775... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-56775 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published8 Jan 2025
Updated5 Aug 2026
First seen5 Aug 2026
Track software like this
Free during beta