In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: don't access invalid sched
Since 2320c9e6a768 ("drm/sched: memset() 'job' in drm_sched_job_init()") accessing job->base.sched can produce unexpected results as the initialisation of (*job)->base.sched done in amdgpu_job_alloc is overwritten by the memset.
This commit fixes an issue when a CS would fail validation and would be rejected after job->num_ibs is incremented. In this case, amdgpu_ib_free(ring->adev, ...) will be called, which would crash the machine because the ring value is bogus.
To fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this because the device is actually not used in this function.
The next commit will remove the ring argument completely.
(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub