In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: don't access invalid sched
Since 2320c9e6a768 ("drm/sched: memset() 'job' in drm_sched_job_init()") accessing job->base.sched can produce unexpected results as the initialisation of (*job)->base.sched done in amdgpu_job_alloc is overwritten by the memset.
This commit fixes an issue when a CS would fail validation and would be rejected after job->num_ibs is incremented. In this case, amdgpu_ib_free(ring->adev, ...) will be called, which would crash the machine because the ring value is bogus.
To fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this because the device is actually not used in this function.
The next commit will remove the ring argument completely.
(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dtb-lgUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-macrosUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinx | Dec 5, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub