LiveActive security incident?Get immediate response
CVE Record

CVE-2024-38581: drm/amdgpu/mes: fix use-after-free issue

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_mes.c

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

CVE-2024-38581 is a Linux kernel issue in the AMDGPU MES graphics scheduler area. The public record says a random use-after-free was fixed by deleting a fence fallback timer. Business urgency depends on whether systems run affected Linux kernels with this graphics driver path enabled.

Executive priority

Set priority after confirming exposure. Without CVSS, KEV, or exploit evidence, this is not automatically an emergency, but affected GPU-enabled Linux systems should receive normal security kernel updates promptly.

Technical view

The vulnerability is in Linux kernel drm/amdgpu/mes. The fix addresses a use-after-free by deleting the fence fallback timer, with stable kernel commits published. The record provides no CVSS, CWE, exploit details, or impact description beyond the use-after-free condition.

Likely exposure

Likely exposure is Linux systems using affected kernel versions and the AMDGPU MES component. Downstream distribution kernels may differ because fixes can be backported, so version strings alone are not definitive.

Exploitation context

The source bundle does not show CISA KEV listing, active exploitation, public exploit availability, or attacker prerequisites. Treat exploitation status as unproven from these sources.

Researcher notes

Evidence is sparse. The record identifies a use-after-free in drm/amdgpu/mes and points to stable commits. It does not provide crash trigger details, exploitability analysis, privilege context, or confidentiality/integrity/availability impact. Validation should focus on kernel provenance and component exposure.

Mitigation direction

  • Apply the relevant Linux kernel stable or distribution update containing the referenced fix.
  • Check vendor security advisories for backported fixed builds.
  • Prioritize systems using AMDGPU graphics paths or GPU workloads.
  • Schedule kernel updates through normal reboot and maintenance procedures.
  • Monitor the CVE record for severity or exploitability updates.

Validation and detection

  • Inventory Linux kernel versions across affected assets.
  • Confirm whether the amdgpu driver is present and in use.
  • Verify installed kernels include one of the referenced stable fixes or vendor backports.
  • Review distribution advisories for CVE-2024-38581 status.
  • Track post-update stability for AMDGPU-related warnings or crashes.
Prepared
Confidence
medium
Sources
6

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2024-38581 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
2ADP providers
5Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CISA-ADPCISA ADP Vulnrichment
other:ssvc
CVECVE Program Container

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux8c5e13ec6a2c26d31d0551dc382661dc10823be0, 8c5e13ec6a2c26d31d0551dc382661dc10823be0, 8c5e13ec6a2c26d31d0551dc382661dc10823be0, 8c5e13ec6a2c26d31d0551dc382661dc10823be0unaffected
LinuxLinux4.20, 0, 6.1.93, 6.6.33, 6.8.12, 6.9affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.