Review reviewHigh

CVE-2024-27029

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140.

PRIORITY ASSESSMENT

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.28%

Technical severityCVSS 7.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140.

Product: Linux Linux, linux kernel
Affected versions: >= aba2be41470a11629c8378c3651323d7e5416df6 < e1e076bda4fd6378ae650f2c6ef1a4ff93c5aea5, >= aba2be41470a11629c8378c3651323d7e5416df6 < 1f24b3040f2b6ffcb97151fabb3070328254d923, >= aba2be41470a11629c8378c3651323d7e5416df6 < 6540ff6482c1a5a6890ae44b23d0852ba1986d9e, >= 6.7, >= 6.7 < 6.7.11, >= 6.8 < 6.8.2
Fixed versions: 6.7.11, 6.8.2

Confirm exposure before applying a vendor-supported change.

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.