CVE-2024-46870 drm/amd/display: Disable DMCUB timeout for DCN35
A race condition in the AMD display driver can cause system hangs or undefined display states due to DMCUB timeout handling issues.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-46870?
CVE-2024-46870 is a medium-severity vulnerability in Linux kernel, published on 9 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Disable DMCUB timeout for DCN35
[Why] DMCUB can intermittently take longer than expected to process commands.
Old ASIC policy was to continue while logging a diagnostic error - which works fine for ASIC without IPS, but with IPS this could lead to a race condition where we attempt to access DCN state while it's inaccessible, leading to a system hang when the NIU port is not disabled or register accesses that timeout and the display configuration in an undefined state.
[How] We need to investigate why these accesses take longer than expected, but for now we should disable the timeout on DCN35 to avoid this race condition. Since the waits happen only at lower interrupt levels the risk of taking too long at higher IRQ and causing a system watchdog timeout are minimal.
Weakness: CWE-362
Which versions are affected by CVE-2024-46870?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-46870?
Apply the vendor's patch.
Is CVE-2024-46870 being exploited?
There is no known exploitation of CVE-2024-46870 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-50781, AZL-50906, BELL-CVE-2024-46870, DEBIAN-CVE-2024-46870, GHSA-r56q-rrpj-wqj3, ROOT-OS-DEBIAN-11-CVE-2024-46870 and 3 more.