Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's AMDGPU driver can cause a double free error, leading to a NULL pointer dereference. This issue arises when command submission fails due to user pointer invalidation. The legacy code attempts to clean up the scheduler job, but this is unnecessary because a previous commit already integrated the job cleanup into the 'amdgpu_job_free' function. The redundant cleanup can cause a double free situation, which in turn leads to a NULL pointer dereference.
Exploitation of this vulnerability causes a NULL pointer dereference, which can lead to a system crash or instability.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux Kernel Archives.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.