Security readout for executives and security teams
Plain-English summary
This Linux kernel issue can deadlock systems using the AMDGPU driver when debugfs MQD files are read. The reported trigger was a backup process accidentally reading debugfs, followed by a possible hard reset. Business impact is primarily local availability disruption on Linux systems with AMD GPUs and exposed debugfs access.
Executive priority
Treat this as a targeted availability risk, not a broad remote compromise. Patch normal production Linux maintenance first for AMD GPU systems, and reduce debugfs exposure where possible. Urgency rises for workstations, GPU servers, or appliances where an unexpected reset affects business operations.
Technical view
CVE-2024-35795 is a resolved Linux kernel AMDGPU debugfs locking bug in amdgpu_debugfs_mqd_read. The source describes a circular dependency between reservation_ww_class_mutex and mm->mmap_lock while reading MQD data from debugfs, producing a deadlock warning and possible system reset.
Likely exposure
Exposure appears limited to Linux systems using the AMDGPU driver where debugfs is mounted and readable by processes such as backup, monitoring, or collection tools. The provided source lists Linux as affected and references stable kernel fixes, but does not provide distribution-specific package names.
Exploitation context
No active exploitation is stated in the provided sources, and KEV is false. The trigger described is accidental local file reading through debugfs, not remote exploitation. Practical risk depends on local debugfs access, AMDGPU presence, and whether automated tools traverse debugfs.
Researcher notes
The evidence supports a local debugfs-triggered deadlock in AMDGPU MQD reading. The source does not include CVSS, CWE, exploit reports, or distribution package mappings. Avoid assuming broader impact beyond Linux AMDGPU debugfs exposure unless vendor advisories add detail.
Mitigation direction
- Update to a vendor kernel containing the referenced AMDGPU stable fixes.
- Restrict or avoid mounting debugfs on production systems unless operationally required.
- Exclude debugfs paths from backup, inventory, and monitoring crawlers.
- Check Linux distribution advisories for exact fixed package versions.
- Prioritize systems with AMD GPUs and production availability requirements.
Validation and detection
- Inventory Linux hosts running the amdgpu kernel module.
- Check whether debugfs is mounted and accessible on those hosts.
- Identify automation that recursively reads system pseudo-filesystems.
- Confirm the running kernel includes a referenced stable fix or vendor backport.
- Review kernel logs for circular locking warnings involving amdgpu_debugfs_mqd_read.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-35795 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/197f6d6987c55860f6eea1c93e4f800c59078874CVE reference, Linux
- https://git.kernel.org/stable/c/8b03556da6e576c62664b6cd01809e4a09d53b5bCVE reference, Linux
- https://git.kernel.org/stable/c/4687e3c6ee877ee25e57b984eca00be53b9a8db5CVE reference, Linux
- https://git.kernel.org/stable/c/8678b1060ae2b75feb60b87e5b75e17374e3c1c5CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.