CVE-2024-26833

drm/amd/display: Fix memory leak in dm_sw_fini()

MEDIUM

5.5

CVSS Score

Published: April 17, 2024 at 10:10 AM UTC

Updated: June 17, 2026 at 07:18 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dm_sw_fini() After destroying dmub_srv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 (size 1024): comm "(udev-worker)", pid 222, jiffies 4294894636 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 6265fd77): [<ffffffff993495ed>] kmalloc_trace+0x29d/0x340 [<ffffffffc0ea4a94>] dm_dmub_sw_init+0xb4/0x450 [amdgpu] [<ffffffffc0ea4e55>] dm_sw_init+0x15/0x2b0 [amdgpu] [<ffffffffc0ba8557>] amdgpu_device_init+0x1417/0x24e0 [amdgpu] [<ffffffffc0bab285>] amdgpu_driver_load_kms+0x15/0x190 [amdgpu] [<ffffffffc0ba09c7>] amdgpu_pci_probe+0x187/0x4e0 [amdgpu] [<ffffffff9968fd1e>] local_pci_probe+0x3e/0x90 [<ffffffff996918a3>] pci_device_probe+0xc3/0x230 [<ffffffff99805872>] really_probe+0xe2/0x480 [<ffffffff99805c98>] __driver_probe_device+0x78/0x160 [<ffffffff99805daf>] driver_probe_device+0x1f/0x90 [<ffffffff9980601e>] __driver_attach+0xce/0x1c0 [<ffffffff99803170>] bus_for_each_dev+0x70/0xc0 [<ffffffff99804822>] bus_add_driver+0x112/0x210 [<ffffffff99807245>] driver_register+0x55/0x100 [<ffffffff990012d1>] do_one_initcall+0x41/0x300 Fix this by freeing dmub_srv after destroying it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.1505.16 ≤ v < 6.1.805.6 ≤ v < 5.10.2115.6 ≤ v < 5.15.1505.6 ≤ v < 6.1.805.6 ≤ v < 6.6.195.6 ≤ v < 6.7.75.6 ≤ v < 6.86.2 ≤ v < 6.6.196.7 ≤ v < 6.7.76.8 rc1 6.8 rc2 6.8 rc3 6.8 rc4 6.8 rc5743b9786b14ae0d7d13b3782dccad158e577e9bb

Vendor states this is fixed in 10c6b90e975358c17856a578419dc449887899c2 (fixed)

Vendor states this is fixed in 33f649f1b1cea39ed360e6c12bba4fac83118e6e (fixed)

Vendor states this is fixed in 541e79265ea7e339a7c4a462feafe9f8f996e04b (fixed)

Vendor states this is fixed in 58168005337eabef345a872be3f87d0215ff3b30 (fixed)

Vendor states this is fixed in b49b022f7dfce85eb77d0d987008fde5c01d7857 (fixed)

Vendor states this is fixed in bae67893578d608e35691dcdfa90c4957debf1d3 (fixed)

Vendor states this is fixed in 5.10.211 (unaffected)

Vendor states this is fixed in 5.15.150 (unaffected)

Vendor states this is fixed in 5.6 (unaffected)

Vendor states this is fixed in 6.1.80 (unaffected)

Vendor states this is fixed in 6.6.19 (unaffected)

Vendor states this is fixed in 6.7.7 (unaffected)