CVE-2024-44977 – This CVE-2024-44977 is an out-of-bounds write v... (How to Fix)

Q: What is the severity of CVE-2024-44977?

CVE-2024-44977 has a CVSS score of 7.8 (HIGH). This CVE-2024-44977 is an out-of-bounds write vulnerability in the AMD GPU driver (drm/amdgpu) in the Linux kernel. It occurs when the Trusted Application (TA) binary size isn't properly validated, potentially allowing attackers to write beyond allocated memory boundaries. This affects Linux systems with AMD GPUs using the vulnerable kernel driver.

📋 TL;DR

This CVE-2024-44977 is an out-of-bounds write vulnerability in the AMD GPU driver (drm/amdgpu) in the Linux kernel. It occurs when the Trusted Application (TA) binary size isn't properly validated, potentially allowing attackers to write beyond allocated memory boundaries. This affects Linux systems with AMD GPUs using the vulnerable kernel driver.

💻 Affected Systems

Products:

Linux kernel with AMD GPU driver (drm/amdgpu)

Versions: Linux kernel versions before the fix commits (specific versions vary by distribution)

Operating Systems: Linux distributions with vulnerable kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Requires AMD GPU hardware and the amdgpu driver to be loaded. Systems without AMD GPUs or with the driver disabled are not affected.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel memory corruption leading to privilege escalation, denial of service, or arbitrary code execution at kernel level.

🟠

Likely Case

Local privilege escalation or system crash/denial of service from a malicious or malformed TA binary.

🟢

If Mitigated

Limited impact if proper access controls prevent untrusted users from loading TA binaries.

🌐 Internet-Facing: LOW - Requires local access to exploit.

🏢 Internal Only: MEDIUM - Could be exploited by malicious local users or through compromised user accounts.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access and ability to load a malicious TA binary. No public exploit code has been identified.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commit c0a04e3570d72aaf090962156ad085e37c62e442 or later

Vendor Advisory: https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution. 2. For Debian: apt update && apt upgrade linux-image-*. 3. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable AMD GPU driver

linux

Prevent loading of vulnerable amdgpu driver module

echo 'blacklist amdgpu' >> /etc/modprobe.d/blacklist-amdgpu.conf
update-initramfs -u
reboot

🧯 If You Can't Patch

Restrict access to GPU functionality to trusted users only
Implement strict access controls to prevent untrusted users from loading TA binaries

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if amdgpu module is loaded: uname -r && lsmod | grep amdgpu

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version is patched and check dmesg for amdgpu driver loading without errors

📡 Detection & Monitoring

Log Indicators:

Kernel panic or oops messages related to amdgpu
System crashes when GPU operations are performed

Network Indicators:

None - local vulnerability only

SIEM Query:

Search for: 'amdgpu' AND ('panic' OR 'oops' OR 'segfault') in kernel logs

📊 Metadata

CVE ID: CVE-2024-44977

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-787

Published: September 4, 2024

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-44977, you might also want to check these: