In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: don't access invalid sched
Since 2320c9e6a768 ("drm/sched: memset() 'job' in drm_sched_job_init()") accessing job->base.sched can produce unexpected results as the initialisation of (*job)->base.sched done in amdgpu_job_alloc is overwritten by the memset.
This commit fixes an issue when a CS would fail validation and would be rejected after job->num_ibs is incremented. In this case, amdgpu_ib_free(ring->adev, ...) will be called, which would crash the machine because the ring value is bogus.
To fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this because the device is actually not used in this function.
The next commit will remove the ring argument completely.
(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-amd | Dec 5, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub