CVE-2024-41022

low-risk
Published 2024-07-29

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() The "instance" variable needs to be signed for the error handling to work.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (17)

Patch https://git.kernel.org/stable/c/298e2ce222e712ffafa47288c5b2fcf33d72fda3
Patch https://git.kernel.org/stable/c/3dd9734878a9042f0358301d19a2b006a0fc4d06
Patch https://git.kernel.org/stable/c/4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287
Patch https://git.kernel.org/stable/c/544fa213f15d27f0370795845d55eeb3e00080d2
Patch https://git.kernel.org/stable/c/6769a23697f17f9bf9365ca8ed62fe37e361a05a
Patch https://git.kernel.org/stable/c/a5224e2123ce21102f346f518db80f004d5053a7
Patch https://git.kernel.org/stable/c/d347c9a398bf7eab9408d207c0a50fb720f9de7d
Patch https://git.kernel.org/stable/c/e8dfbf83a82bbfb9680921719fbe65e535af59ea
Patch https://git.kernel.org/stable/c/298e2ce222e712ffafa47288c5b2fcf33d72fda3
Patch https://git.kernel.org/stable/c/3dd9734878a9042f0358301d19a2b006a0fc4d06
Patch https://git.kernel.org/stable/c/4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287
Patch https://git.kernel.org/stable/c/544fa213f15d27f0370795845d55eeb3e00080d2
Patch https://git.kernel.org/stable/c/6769a23697f17f9bf9365ca8ed62fe37e361a05a
Patch https://git.kernel.org/stable/c/a5224e2123ce21102f346f518db80f004d5053a7
Patch https://git.kernel.org/stable/c/d347c9a398bf7eab9408d207c0a50fb720f9de7d
Patch https://git.kernel.org/stable/c/e8dfbf83a82bbfb9680921719fbe65e535af59ea
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal