In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: don't access invalid sched
Since 2320c9e6a768 ("drm/sched: memset() 'job' in drm_sched_job_init()") accessing job->base.sched can produce unexpected results as the initialisation of (*job)->base.sched done in amdgpu_job_alloc is overwritten by the memset.
This commit fixes an issue when a CS would fail validation and would be rejected after job->num_ibs is incremented. In this case, amdgpu_ib_free(ring->adev, ...) will be called, which would crash the machine because the ring value is bogus.
To fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this because the device is actually not used in this function.
The next commit will remove the ring argument completely.
(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-zfcpdump | Dec 5, 2025 | Jan 29, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub