CVE-2024-46870

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 [Why] DMCUB can intermittently take longer than expected to process commands. Old ASIC policy was to continue while logging a diagnostic error - which works fine for ASIC without IPS, but with IPS this could lead to a race condition where we attempt to access DCN state while it's inaccessible, leading to a system hang when the NIU port is not disabled or register accesses that timeout and the display configuration in an undefined state. [How] We need to investigate why these accesses take longer than expected, but for now we should disable the timeout on DCN35 to avoid this race condition. Since the waits happen only at lower interrupt levels the risk of taking too long at higher IRQ and causing a system watchdog timeout are minimal.

SeverityMedium
CVSS4.7
Exploit probability—
ProductLinux Kernel
PublishedOct 9, 2024
First seenOct 9, 2024

How to fix

Update
  • linux linux_kernel4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.112, 6.6.53, 6.10.12 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel4.15 ≤ v < 4.19.323, 4.20 ≤ v < 5.4.285, 5.5 ≤ v < 5.10.227, 5.11 ≤ v < 5.15.168, 5.16 ≤ v < 6.1.112, 6.2 ≤ v < 6.6.53, 6.7 ≤ v < 6.10.124.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.112, 6.6.53, 6.10.12

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.