CVE-2024-41011

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages We don't get the right offset in that case. The GPU has an unused 4K area of the register BAR space into which you can remap registers. We remap the HDP flush registers into this space to allow userspace (CPU or GPU) to flush the HDP when it updates VRAM. However, on systems with >4K pages, we end up exposing PAGE_SIZE of MMIO space.

• CWE-682

• https://git.kernel.org/stable/c/009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884Patch
• https://git.kernel.org/stable/c/4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724Patch
• https://git.kernel.org/stable/c/6186c93560889265bfe0914609c274eff40bbeb5Patch
• https://git.kernel.org/stable/c/89fffbdf535ce659c1a26b51ad62070566e33b28Patch
• https://git.kernel.org/stable/c/8ad4838040e5515939c071a0f511ce2661a0889dPatch
• https://git.kernel.org/stable/c/be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7Patch
• https://git.kernel.org/stable/c/f7276cdc1912325b64c33fcb1361952c06e55f63Patch
• https://git.kernel.org/stable/c/4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724Patch
• https://git.kernel.org/stable/c/6186c93560889265bfe0914609c274eff40bbeb5Patch
• https://git.kernel.org/stable/c/89fffbdf535ce659c1a26b51ad62070566e33b28Patch
• https://git.kernel.org/stable/c/be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7Patch
• https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html

Published

Jul 18, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41006In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41007In the Linux kernel, the following vulnerability has been re…3.3
• CVE-2024-41008In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41009In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-4101Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-41010In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41012In the Linux kernel, the following vulnerability has been re…6.3
• CVE-2024-41013In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-41014In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-41015In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41016In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41017In the Linux kernel, the following vulnerability has been re…5.5