Kernel Vulnerability in Linux Packages: AMD PMC STB Accessibility Issue
Summary
CVE-2024-53072: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amd_pmc module as: amd_pmc enable_stb=1 ...can result in the following messages in th... Affects linux versions < 6.1.119-1. Fixed in 6.1.119-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware resources and provides essential services to software applications. It is widely used across various distributions, including Debian. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability specifically affects the 'amd_pmc' module, which is responsible for power management on AMD platforms. The issue arises when the module is loaded with an incorrect parameter, leading to potential system instability and error messages in the kernel ring buffer.
Vulnerability Detail
In the Linux kernel, a vulnerability exists in the 'amd_pmc' module when it is loaded with the parameter 'enable_stb=1'. This can lead to kernel error messages indicating that the System Trace Buffer (STB) is not accessible. Specifically, the kernel may log errors such as 'SMU cmd failed' and warnings related to invalid memory mapping. This occurs when the requests for physical address values return zero, indicating that the STB is not available. The ramifications of this issue include potential system instability and confusion for users due to misleading error messages.
How To Fix
Minimum fixed version
6.1.119-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid loading the 'amd_pmc' module with the 'enable_stb=1' parameter until a patched version is installed. This can be done by either not loading the module or using the command: 'modprobe amd_pmc enable_stb=0'.
Conclusion
The vulnerability in the Linux kernel related to the AMD PMC module poses risks of system instability due to inaccessible System Trace Buffer. Users are advised to update their kernel to the latest version to mitigate this issue. Temporary workarounds are available, but a permanent fix through updates is recommended for optimal system performance.
See every vulnerability recorded for linux →
FAQ
The AMD PMC (Power Management Controller) module is responsible for managing power states and performance features on AMD processors.
The error message indicates that the System Trace Buffer (STB) is not accessible, which may lead to system instability.
You can use the Vulert platform to check if your application is affected by this vulnerability without requiring code access. Visit Vulert Scanner for more information.
Yes, the permanent fix is to update your Linux kernel to the latest version that addresses this vulnerability.
If you cannot update your kernel immediately, avoid using the 'enable_stb=1' parameter when loading the 'amd_pmc' module as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
