In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: change vm->task_info handling
This patch changes the handling and lifecycle of vm->task_info object. The major changes are: - vm->task_info is a dynamically allocated ptr now, and its uasge is reference counted. - introducing two new helper funcs for task_info lifecycle management - amdgpu_vm_get_task_info: reference counts up task_info before returning this info - amdgpu_vm_put_task_info: reference counts down task_info - last put to task_info() frees task_info from the vm.
This patch also does logistical changes required for existing usage of vm->task_info.
V2: Do not block all the prints when task_info not found (Felix)
V3: Fixed review comments from Felix - Fix wrong indentation - No debug message for -ENOMEM - Add NULL check for task_info - Do not duplicate the debug messages (ti vs no ti) - Get first reference of task_info in vm_init(), put last in vm_fini()
V4: Fixed review comments from Felix - fix double reference increment in create_task_info - change amdgpu_vm_get_task_info_pasid - additional changes in amdgpu_gem.c while porting
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-devel | Sep 26, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | Jul 16, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf | Oct 2, 2024 | Jul 16, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade reiserfs-kmp-default | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub