cve 2024 36024

About this tag
CVE-2024-36024 is a Linux kernel vulnerability in the AMD DRM display driver (drm/amd/display) that disables an idle reallow path. Microsoft's advisory states that Azure Linux includes the affected open-source library and is potentially impacted, but this does not confirm that Azure Linux is the only Microsoft product affected. The vulnerability is tracked in the Linux kernel and relates to attestation limits and exposure risk. Discussions on WindowsForum.com focus on understanding the scope of Microsoft's advisory and the actual risk to Azure Linux and other Microsoft products that may include the vulnerable component.

  1. Azure Linux CVE-2024 36024: Attestation Limits and Exposure Risk

    Microsoft’s public advisory that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate for the product inventory Microsoft has completed — but it is not proof that Azure Linux is the only Microsoft product that could possibly include the vulnerable...