CVE-2024-36352: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™

Описание

Оригинално описание

Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service.

Засегнати продукти

• AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.10.1 (23.19.21.01 pre-RDNA), AMD Software: PRO Edition 24.Q4 (23.19.21.01/23.19.21.04 pre-RDNA)
• AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.10.1 (23.19.21.01 pre-RDNA), AMD Software: PRO Edition 24.Q4 (23.19.21.01/23.19.21.04 pre-RDNA)
• AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Ryzen™ 9000 Series Desktop Processors: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Ryzen™ 4000 Series Desktop Processors: AMD Software: Adrenalin Edition 24.10.1 (23.19.21.01 pre-RDNA), AMD Software: PRO Edition 24.Q4 (23.19.21.01/23.19.21.04 pre-RDNA)
• AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.10.1 (23.19.21.01 pre-RDNA), AMD Software: PRO Edition 24.Q4 (23.19.21.01/23.19.21.04 pre-RDNA)
• AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.10.1 (23.19.21.01 pre-RDNA), AMD Software: PRO Edition 24.Q4 (23.19.21.01/23.19.21.04 pre-RDNA)
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.10.1 (23.19.21.01 pre-RDNA), AMD Software: PRO Edition 24.Q4 (23.19.21.01/23.19.21.04 pre-RDNA)
• AMD AMD Ryzen™ 7000 Series Desktop Processors: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Ryzen™ 8000 Series Desktop Processors: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Ryzen™ Embedded V2000 Series Processors: LTS Kernel 6.12.25
• AMD AMD Radeon™ RX 5000 Series Graphics Products: AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01 RDNA)
• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01 RDNA)
• AMD AMD Radeon™ RX 7000 Series Graphics Products: AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01 RDNA)
• AMD AMD Radeon™ RX Vega Series Graphics Cards: AMD Software: Adrenalin Edition 24.10.1 (23.19.21.01 pre-RDNA), AMD Software: PRO Edition 24.Q4 (23.19.21.01/23.19.21.04 pre-RDNA)
• AMD AMD Radeon™ PRO W5000 Series Graphics Products: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Radeon™ PRO W7000 Series Graphics Products: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Radeon™ VII: AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01 RDNA)
• AMD AMD Radeon™ PRO VII: AMD Software: PRO Edition 24.Q4 (24.20.30 RDNA)
• AMD AMD Radeon™ Instinct™ MI25 Graphics Products: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V520 Graphics Products: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V620 Graphics Products: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V710 Graphics Products: Contact your AMD Customer Engineering representative

Вид слабост

• CWE-822 Untrusted Pointer Dereference

История

Други уязвимости в AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

• 6.9CVE-2026-43603
• 7.4CVE-2023-20577
• 7.7CVE-2023-20576
• 3.3CVE-2023-31308
• 6.4CVE-2023-20511

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-36352
• https://nvd.nist.gov/vuln/detail/CVE-2024-36352
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html