CVE-2024-41008High· 7.8▾ Twilight

drm/amdgpu: change vm->task_info handling

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm->task_info handling This patch changes the handling and lifecycle of vm->task_info object. The major changes are: - vm->task_info is a dynamicall…

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score43/ 100 · Moderate

impact 42.9 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Jul 16, 2024

Updated

Oct 21, 2026

CVSS

7.8

Vendor

Linux

Product

Linux

CWE

—

Depth score

43 · Moderate

EPSS

0.23% · p14

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

decided 2024-09-10

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 21.

0.2% → 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 832 days

Jul 16, 2024Published
Disclosed via CVEORG
Oct 21, 2026Record revised
Last analysed / modified upstream
Oct 21, 2026EPSS first tracked
0.2%
Oct 26, 2026EPSS peak
0.2% → 0.2%

Linux #cve.org

Affected

Linux >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 251840f22eff35c25de531a3fcb523df94c128c0
Linux >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < b8f67b9ddf4f8fe6dd536590712b5912ad78f99c
Linux 4.2

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: change vm->task_info handling

This patch changes the handling and lifecycle of vm->task_info object. The major changes are:

vm->task_info is a dynamically allocated ptr now, and its uasge is reference counted.
introducing two new helper funcs for task_info lifecycle management
- amdgpu_vm_get_task_info: reference counts up task_info before returning this info
- amdgpu_vm_put_task_info: reference counts down task_info
last put to task_info() frees task_info from the vm.

This patch also does logistical changes required for existing usage of vm->task_info.

V2: Do not block all the prints when task_info not found (Felix)

V3: Fixed review comments from Felix

Fix wrong indentation
No debug message for -ENOMEM
Add NULL check for task_info
Do not duplicate the debug messages (ti vs no ti)
Get first reference of task_info in vm_init(), put last in vm_fini()

V4: Fixed review comments from Felix

fix double reference increment in create_task_info
change amdgpu_vm_get_task_info_pasid
additional changes in amdgpu_gem.c while porting

Affected

Linux >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 251840f22eff35c25de531a3fcb523df94c128c0
Linux >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < b8f67b9ddf4f8fe6dd536590712b5912ad78f99c
Linux 4.2

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org

drm/amdgpu: change vm->task_info handling

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score43/ 100 · Moderate

impact 42.9 · likelihood 0 · exploitation 0

Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: change vm->task_info handling

This patch changes the handling and lifecycle of vm->task_info object. The major changes are:

vm->task_info is a dynamically allocated ptr now, and its uasge is reference counted.

introducing two new helper funcs for task_info lifecycle management

amdgpu_vm_get_task_info: reference counts up task_info before returning this info
amdgpu_vm_put_task_info: reference counts down task_info

last put to task_info() frees task_info from the vm.

This patch also does logistical changes required for existing usage of vm->task_info.

V2: Do not block all the prints when task_info not found (Felix)

V3: Fixed review comments from Felix

Fix wrong indentation

No debug message for -ENOMEM

Add NULL check for task_info

Do not duplicate the debug messages (ti vs no ti)

Get first reference of task_info in vm_init(), put last in vm_fini()

V4: Fixed review comments from Felix

fix double reference increment in create_task_info

change amdgpu_vm_get_task_info_pasid

additional changes in amdgpu_gem.c while porting