In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending a single amdgpu_gem_userptr_ioctl to the AMDGPU DRM driver…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending a single amdgpu_gem_userptr_ioctl to the AMDGPU DRM driver on any ASICs with an invalid address and size. The bug was reported by Joonkyo Jung <joonkyoj@yonsei.ac.kr>. For example the following code: static void Syzkaller1(int fd) { struct drm_amdgpu_gem_userptr arg; int ret; arg.addr = 0xffffffffffff0000; arg.size = 0x80000000; /*2 Gb*/ arg.flags =…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/22207fd5c80177b860279653d017474b2812af5e Patch
- https://git.kernel.org/stable/c/22f665ecfd1225afa1309ace623157d12bb9bb0c Patch
- https://git.kernel.org/stable/c/2e13f88e01ae7e28a7e831bf5c2409c4748e0a60
- https://git.kernel.org/stable/c/af054a5fb24a144f99895afce9519d709891894c Patch
- https://git.kernel.org/stable/c/e87e08c94c9541b4e18c4c13f2f605935f512605 Patch
- https://git.kernel.org/stable/c/22207fd5c80177b860279653d017474b2812af5e Patch
- https://git.kernel.org/stable/c/22f665ecfd1225afa1309ace623157d12bb9bb0c Patch
- https://git.kernel.org/stable/c/af054a5fb24a144f99895afce9519d709891894c Patch
- https://git.kernel.org/stable/c/e87e08c94c9541b4e18c4c13f2f605935f512605 Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Timeline
- nvd_ingest NVD