Loading story…
The Linux kernel stable tree fixed CVE-2023-52469, a use-after-free vulnerability in the AMDGPU legacy dynamic power-management driver affecting CIK/Kaveri-class hardware. If allocation of a kv_ps structure fails in kv_parse_power_table, the previous error path freed adev->pm.dpm.ps; later cleanup in kv_dpm_fini could then access the freed array. The patch removes the premature free and returns -ENOMEM, preventing the invalid access.
Red Hat rates the flaw as Moderate with CVSS 4.4 for its products, citing local access, high privileges, and availability impact, while NVD and CVE.org score it 7.8. Red Hat has shipped fixes for the standard and real-time kernels in RHEL 8 and the standard kernel in RHEL 9; RHEL 9 kernel-rt is marked will not fix, and RHEL 6 and 7 status remains under investigation.
See affected versions and whether adversaries are exploiting it.
5 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2024:5101 for the RHEL 8 standard kernel and RHSA-2024:5102 for the RHEL 8 real-time kernel, addressing CVE-2023-52469.
Unity Linux published security update UTSA-2024-002937 for kernel packages addressing CVE-2023-52469. The update provides a patch for the local, low-privilege vulnerability.
Red Hat issued RHSA-2024:2394, fixing CVE-2023-52469 in the standard RHEL 9 kernel package.
Zhipeng Lu authored a patch to fix a use-after-free in AMDGPU's kv_parse_power_table allocation-failure path. The patch removes the premature free of adev->pm.dpm.ps and returns -ENOMEM directly when kv_ps allocation fails.
Greg Kroah-Hartman committed the stable-kernel patch for the AMDGPU legacy dynamic power-management use-after-free, preventing kv_dpm_fini from accessing adev->pm.dpm.ps after it was freed.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
tenable.com
Open sourceredhat.com
Open sourcegit.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2024-26939** is a use-after-free flaw in the Linux kernel's Intel i915 DRM graphics driver, in `drivers/gpu/drm/i915/i915_vma.c`. A race between i915 VMA destruction and asynchronous retirement can free a VMA while retirement logic still accesses it, allowing a local low-privileged attacker to crash the affected system. The vulnerability was introduced in Linux 5.19 and can produce debug-object warnings when a GPU GT is parked. The issue is fixed upstream in Linux kernel versions 6.1.88, 6.6.29, 6.8.3, and 6.9-rc2 and later stable releases. Red Hat has issued fixes for RHEL 8, RHEL 8 kernel-rt, RHEL 9, and RHEL 9.4 Extended Update Support; RHEL 9 kernel-rt is marked will not fix, while RHEL 6 and 7 variants are outside support scope. Red Hat rates the flaw Moderate at CVSS 5.5, compared with scores of 7.0 from NVD and 7.8 from CVE.org.
Aug 26, 2026
**CVE-2023-52817** is a moderate-severity flaw in the Linux kernel's AMDGPU DRM driver. On affected GPUs, including VEGA20, a low-privileged local user can read the `amdgpu_regs_smc` debugfs file while the `smc_rreg` pointer is NULL, triggering a NULL-pointer dereference in `amdgpu_debugfs_regs_smc_read` and causing a kernel oops or system crash. Red Hat rates the local denial-of-service issue CVSS 3.1 5.5. The vulnerability is fixed in Linux stable releases 4.19.300, 5.4.262, 5.10.202, 5.15.140, 6.1.64, 6.5.13, 6.6.3, and 6.7 and later. Red Hat issued standard-kernel fixes for RHEL 8 and RHEL 9, plus the RHEL 8 real-time kernel, through advisories including RHSA-2024:7000, RHSA-2024:7001, and RHSA-2024:9315; RHEL 9 `kernel-rt` was listed as affected. Administrators should deploy the latest vendor-supported kernel update rather than backporting individual patches.
Aug 26, 2026
**CVE-2023-52470** affects the Linux kernel DRM/Radeon driver because `radeon_crtc_init()` did not validate the result of `alloc_workqueue()` when creating its `flip_queue`. Under an allocation failure, initialization could continue with a NULL workqueue pointer, causing a kernel null-pointer dereference and allowing a local denial of service through a crash, restart, or process exit. Red Hat rates the flaw Low severity (CVSS 3.1: 4.4); confidentiality and integrity are not affected, but availability impact is high. Upstream and stable kernel patches now allocate and validate the workqueue before DRM CRTC initialization, free the Radeon CRTC object if allocation fails, and exit safely. The fix is included in Linux stable releases, including Fedora's 6.6.16 update. Red Hat issued fixes for standard and real-time RHEL 8 kernels and the standard RHEL 9 kernel; RHEL 6 and 7 variants remained under investigation, while the RHEL 9 real-time kernel fix was deferred.
Aug 28, 2026