Skip to content
Heist/ feed
Back to feed
HighFix available

drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 This reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap. The basic problem here is that after the move the old location is simply not available any more. Some fixes were suggested, but essentially we should call the move notification before actually moving things because only this way we have the correct order for DMA-buf and VM move notifications as well. Also rework the statistic handling so that we don't update the eviction counter before the move. v2: add missing NULL check

Products
Kernel
Affected versions
Not specified
Fixed versions
6.1.91, 6.6.31, 6.8.10
CVEs
CVE-2024-27400
Confirmed fixed CVEs
Not specified
Updated in this feed
4 Nov 2026, 15:32 UTC · Revision 1

Source evidence

drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

core-osv · Original source

Published 13 May 2024, 10:26 UTC

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 This reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap. The basic problem here is that after the move the old location is simply not available any more. Some fixes were suggested, but essentially we should call the move notification before actually moving things because only this way we have the correct order for DMA-buf and VM move notifications as well. Also rework the statistic handling so that we don't update the eviction counter before the move. v2: add missing NULL check

osv:CVE-2024-27400

Kernel

Fixed versions: 6.1.91, 6.6.31, 6.8.10

Complete source record
{
  "id": "f975383ce604fc60d2a6ad77870f8bfe3e2bb0dd4a49fe97494dbf9ff8481046",
  "url": "https://osv.dev/vulnerability/CVE-2024-27400",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 This reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap. The basic problem here is that after the move the old location is simply not available any more. Some fixes were suggested, but essentially we should call the move notification before actually moving things because only this way we have the correct order for DMA-buf and VM move notifications as well. Also rework the statistic handling so that we don't update the eviction counter before the move. v2: add missing NULL check",
    "evidence": "osv:CVE-2024-27400",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.91",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.31",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.8.10",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2024-27400",
      "aliases": [
        "CVE-2024-27400"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "d443fb67ca5ab04760449d21ddea66f6728e5b00"
                },
                {
                  "fixed": "5c25b169f9a0b34ee410891a96bc9d7b9ed6f9be"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "e7a0ee45c653784edda5e36bae6ae3c75fd5e7a8"
                },
                {
                  "fixed": "0c7ed3ed35eec9138b88d42217b5a6b9a62bda4d"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "94aeb4117343d072e3a35b9595bcbfc0058ee724"
                },
                {
                  "fixed": "9a4f6e138720b6e9adf7b82a71d0292f3f276480"
                },
                {
                  "fixed": "d3a9331a6591e9df64791e076f6591f440af51c3"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "6.1.77"
                },
                {
                  "fixed": "6.1.91"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "6.6.16"
                },
                {
                  "fixed": "6.6.31"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5.15.149"
                },
                {
                  "fixed": "5.16"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "6.7.4"
                },
                {
                  "fixed": "6.8"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "77bcd4ab446fa35ad135b1c7404415ed9a129296"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "1cd2b612474c07b17a21e27f2eed8dff75cb5057"
                }
              ]
            }
          ],
          "versions": [
            "v6.1.90",
            "v6.1.89",
            "v6.1.88",
            "v6.1.87",
            "v6.1.86",
            "v6.1.85",
            "v6.1.84",
            "v6.1.83",
            "v6.1.82",
            "v6.1.81",
            "v6.1.80",
            "v6.1.79",
            "v6.1.78",
            "v6.1.77",
            "v6.6.30",
            "v6.6.29",
            "v6.6.28",
            "v6.6.27",
            "v6.6.26",
            "v6.6.25",
            "v6.6.24",
            "v6.6.23",
            "v6.6.22",
            "v6.6.21",
            "v6.6.20",
            "v6.6.19",
            "v6.6.18",
            "v6.6.17",
            "v6.6.16",
            "v5.15.223",
            "v5.15.222",
            "v5.15.221",
            "v5.15.220",
            "v5.15.219",
            "v5.15.218",
            "v5.15.217",
            "v5.15.216",
            "v5.15.215",
            "v5.15.214",
            "v5.15.213",
            "v5.15.212",
            "v5.15.211",
            "v5.15.210",
            "v5.15.209",
            "v5.15.208",
            "v5.15.207",
            "v5.15.206",
            "v5.15.205",
            "v5.15.204",
            "v5.15.203",
            "v5.15.202",
            "v5.15.201",
            "v5.15.200",
            "v5.15.199",
            "v5.15.198",
            "v5.15.197",
            "v5.15.196",
            "v5.15.195",
            "v5.15.194",
            "v5.15.193",
            "v5.15.192",
            "v5.15.191",
            "v5.15.190",
            "v5.15.189",
            "v5.15.188",
            "v5.15.187",
            "v5.15.186",
            "v5.15.185",
            "v5.15.184",
            "v5.15.183",
            "v5.15.182",
            "v5.15.181",
            "v5.15.180",
            "v5.15.179",
            "v5.15.178",
            "v5.15.177",
            "v5.15.176",
            "v5.15.175",
            "v5.15.174",
            "v5.15.173",
            "v5.15.172",
            "v5.15.171",
            "v5.15.170",
            "v5.15.169",
            "v5.15.168",
            "v5.15.167",
            "v5.15.166",
            "v5.15.165",
            "v5.15.164",
            "v5.15.163",
            "v5.15.162",
            "v5.15.161",
            "v5.15.160",
            "v5.15.159",
            "v5.15.158",
            "v5.15.157",
            "v5.15.156",
            "v5.15.155",
            "v5.15.154",
            "v5.15.153",
            "v5.15.152",
            "v5.15.151",
            "v5.15.150",
            "v5.15.149",
            "v6.7.12",
            "v6.7.11",
            "v6.7.10",
            "v6.7.9",
            "v6.7.8",
            "v6.7.7",
            "v6.7.6",
            "v6.7.5",
            "v6.7.4"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27400.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "6.1.91"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.31"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.8.10"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27400.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:36.942769457Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/0c7ed3ed35eec9138b88d42217b5a6b9a62bda4d",
        "https://git.kernel.org/stable/c/5c25b169f9a0b34ee410891a96bc9d7b9ed6f9be",
        "https://git.kernel.org/stable/c/9a4f6e138720b6e9adf7b82a71d0292f3f276480",
        "https://git.kernel.org/stable/c/d3a9331a6591e9df64791e076f6591f440af51c3",
        "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/",
        "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27400.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-27400",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27400.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-27400",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 504110,
  "published_at": "2024-05-13T10:26:13.504+00:00"
}