CVE-2024-26915: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26915 affects the Linux kernel's AMD GPU driver (amdgpu). The vulnerability was discovered and disclosed on April 17, 2024, and involves the handling of IH (Interrupt Handler) ring buffer overflows in the AMD GPU driver. The issue specifically relates to the OVERFLOW_CLEAR bit functionality in the driver's interrupt handling mechanism (CVE).

The vulnerability exists in the interrupt handling mechanism of the AMD GPU driver, specifically in how it manages the IH OVERFLOW_CLEAR bit. The issue affects multiple AMD GPU driver components including CIK, CZ, Iceland, Navi10, SI, Tonga, Vega10, and Vega20 interrupt handlers. The CVSS v3.1 base score is 5.5 (Medium) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability affects the system's ability to detect subsequent IH ring buffer overflows, which could potentially impact system stability and performance. The CVSS scoring indicates that while the vulnerability requires local access and cannot compromise confidentiality or integrity, it can have a high impact on availability (CISA-ADP).

The vulnerability requires local access with low complexity and privileged access to exploit. No public exploits have been reported in the wild (NVD).

The issue has been fixed in various Linux kernel versions. Ubuntu has released patches for multiple versions including 22.04 LTS (jammy) with version 5.15.0-112.122, and fixes are available for other distributions. The fix involves properly resetting the OVERFLOW_CLEAR bit to enable detection of subsequent overflows (Ubuntu Security).