Linux Kernel Reference Count Leak Vulnerability in AMD GPU Driver

A reference count leak vulnerability has been identified in the AMD GPU driver of the Linux kernel. The issue arises in the 'amdgpu_cs_fence_to_handle_ioctl()' function, specifically when 'info->in.what' defaults to an error case. In this scenario, the function returns -EINVAL without decrementing the reference count of a 'dma_fence' object, which had been incremented earlier. This oversight can lead to a reference count leak. The vulnerability has been addressed by ensuring the reference count is properly decremented before returning the error code.

Impact

Exploitation of this vulnerability can lead to a reference count leak, potentially causing memory management issues.