7.8

CVE-2026-74450

drm/amd/pm: fix pptable use-after-free

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fix pptable use-after-free

amdgpu_dpm_get_pp_table() returns a pointer to a driver-owned power table
after dropping adev->pm.mutex. The sysfs path then copies from that pointer.
A concurrent pp_table write can replace and free the allocation during the
copy, causing a use-after-free.

Change the DPM interface to copy into caller-provided storage while the mutex
is held. Keep the size-only query for attribute discovery without exposing
the driver-owned pointer.

(cherry picked from commit f6eed7acfd30099ef7baeb6ba45bb59daad80631)
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1684d3ba488529266ce6f97b88076bd185f4790e
Version < 3fbb3ac75000e3187f500a91a4099b24206866a1
Status affected
Version 1684d3ba488529266ce6f97b88076bd185f4790e
Version < 9efc767335234cf7a892e46d45cd453b711421e7
Status affected
Version 1684d3ba488529266ce6f97b88076bd185f4790e
Version < 81b5af1fb0f14cace6c3b3130a05e5602a597820
Status affected
Version 1684d3ba488529266ce6f97b88076bd185f4790e
Version < 8c685df5c3b261c42505110965b42f9a754eb9b7
Status affected
Version 1684d3ba488529266ce6f97b88076bd185f4790e
Version < b628f2c6feb3a115ea72d3120a2bd94afc5163df
Status affected
Version 1684d3ba488529266ce6f97b88076bd185f4790e
Version < bb493058c35c8676e48269ab6732688ea733d23c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.9
Status affected
Version 0
Version < 4.9
Status unaffected
Version <= 6.1.*
Version 6.1.184
Status unaffected
Version <= 6.6.*
Version 6.6.153
Status unaffected
Version <= 6.12.*
Version 6.12.105
Status unaffected
Version <= 6.18.*
Version 6.18.46
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.022
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b628f2c6feb3a115ea72d3120a2bd94afc5163df
https://git.kernel.org/stable/c/bb493058c35c8676e48269ab6732688ea733d23c
https://git.kernel.org/stable/c/3fbb3ac75000e3187f500a91a4099b24206866a1
https://git.kernel.org/stable/c/81b5af1fb0f14cace6c3b3130a05e5602a597820
https://git.kernel.org/stable/c/8c685df5c3b261c42505110965b42f9a754eb9b7
https://git.kernel.org/stable/c/9efc767335234cf7a892e46d45cd453b711421e7