CVE-2024-26916 json
Revert "drm/amd: flush any delayed gfxoff on suspend entry"
published 2024-04-17 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-24178
- cvss
- 5.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 6%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
Revert "drm/amd: flush any delayed gfxoff on suspend entry"
commit ab4750332dbe ("drm/amdgpu/sdma5.2: add begin/end_use ring callbacks") caused GFXOFF control to be used more heavily and the codepath that was removed from commit 0dee72639533 ("drm/amd: flush any delayed gfxoff on suspend entry") now can be exercised at suspend again.
Users report that by using GNOME to suspend the lockscreen trigger will cause SDMA traffic and the system can deadlock.
This reverts commit 0dee726395333fea833eaaf838bc80962df886c8.
Patch / fix
- Linux Linux 5.15.149, 6.1.79, 6.6.18, 6.7.6, 6.8
- linux Debian 12 6.1.82-1
- linux Debian 14, Debian 13 6.7.7-1
debian advisories DEBIAN-CVE-2024-26916
- linux Ubuntu 22.04 LTS 5.15.0-106.116
- linux-aws Ubuntu 22.04 LTS 5.15.0-1061.67
- linux-gcp Ubuntu 22.04 LTS 5.15.0-1059.67
- linux-gke Ubuntu 22.04 LTS 5.15.0-1058.63
- linux-ibm Ubuntu 22.04 LTS 5.15.0-1054.57
- linux-kvm Ubuntu 22.04 LTS 5.15.0-1058.63
- linux-azure Ubuntu 22.04 LTS 5.15.0-1063.72
- linux-gkeop Ubuntu 22.04 LTS 5.15.0-1044.51
ubuntu advisories UBUNTU-CVE-2024-26916
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel-rt Linux Micro 6.0 6.4.0-9.1
- kernel-source-rt Linux Micro 6.0 6.4.0-9.1
- dtb-aarch64 openSUSE Leap 15.5 5.14.21-150500.55.68.1
- kernel-64kb SLE Module for Basesystem 15 SP5, openSUSE Leap 15.5 5.14.21-150500.55.68.1
- kernel-syms SLE Module for Development Tools 15 SP5, openSUSE Leap 15.5 5.14.21-150500.55.68.1
- kernel-obs-qa openSUSE Leap 15.5 5.14.21-150500.55.68.1
- kernel-source SLE Module for Development Tools 15 SP5, SLE Module for Basesystem 15 SP5, openSUSE Leap 15.5 5.14.21-150500.55.68.1
- kernel-default SLE Workstation Extension 15 SP5, SLE Module for Legacy 15 SP5, SLE Module for Basesystem 15 SP5 +4 more 5.14.21-150500.55.68.1
suse advisories SUSE-SU-2025:20028-1SUSE-SU-2024:2190-1SUSE-SU-2024:2019-1SUSE-SU-2024:2008-1
- git.kernel.org/stable/c/65158edb0a3a8df23197d52cd24287e39eaf95d6 commit
- git.kernel.org/stable/c/ff70e6ff6fc2413caf33410af7462d1f584d927e commit
- git.kernel.org/stable/c/caa2565a2e13899be31f7b1e069e6465d3e2adb0 commit
- git.kernel.org/stable/c/d855ceb6a5fde668c5431156bc60fae0cc52b764 commit
- git.kernel.org/stable/c/916361685319098f696b798ef1560f69ed96e934 commit
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2024-26916 updated cvss 5.5
kernel: Revert "drm/amd: flush any delayed gfxoff on suspend entry"
-
Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 moreaffected: no fix available
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.17% chance of exploitation in the next 30 days, higher than 6% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Linux Linux
Classification
- Weakness
-
- CWE-667 Improper Locking
- Technology feeds
References
-
git.kernel.org
/stable/c/65158edb0a3a8df23197d52cd24287e39eaf95d6
patch
-
git.kernel.org
/stable/c/ff70e6ff6fc2413caf33410af7462d1f584d927e
patch
-
git.kernel.org
/stable/c/caa2565a2e13899be31f7b1e069e6465d3e2adb0
patch
-
git.kernel.org
/stable/c/d855ceb6a5fde668c5431156bc60fae0cc52b764
patch
-
git.kernel.org
/stable/c/916361685319098f696b798ef1560f69ed96e934
patch
Sources
- CVE List CVE-2024-26916
- NVD CVE-2024-26916
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.