CVE-2024-49991

HighCVSS 7.8

Published: 21/10/2024(UTC)Updated: 04/08/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

A vulnerability has been identified and resolved in the Linux kernel within the drm/amdkfd module. The issue was related to improper pointer clearing, which could lead to a use-after-free bug.

Risk Assessment

Exploitation of this vulnerability could lead to unpredictable system behavior, posing risks to the stability and security of applications running on the Linux kernel.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor the system for potential exploits.

Other vulnerabilities in Linux kernel, drm/amdkfd

CVE-2026-45878High
A vulnerability has been identified in the Linux kernel related to improper bounds checking of watch_id in address debugging. Passing a large watch_id from userspace can lead to buffer overflow errors and invalid memory access.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Pass pointer reference to amdgpu_bo_unref to clear the correct pointer, otherwise amdgpu_bo_unref clear the local variable, the original pointer not set to NULL, this could cause use-after-free bug.