Linux Kernel KFD Component Use-After-Free Vulnerability in Memory Management

A use-after-free vulnerability has been identified in the Linux kernel's AMD KFD (Kernel Fusion Driver) component. This issue arises because kgd_mem pointers, which are returned by the kfd_process_device_translate_handle function, are only valid while the associated mutex is held. Once the mutex is released, another thread can free the buffer object, leading to potential memory management issues.

Impact

Exploitation of this vulnerability could lead to use-after-free conditions, allowing for memory corruption or arbitrary code execution.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit containing the fix can be downloaded as a tarball.