Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's AMDGPU graphics driver has been addressed. The issue arose from improper handling of the scheduling job structure, which could lead to system crashes. When a command stream (CS) failed validation, the job's scheduling information was incorrectly managed, causing a crash by referencing an invalid ring value. This vulnerability has been fixed by ensuring that a null pointer is passed to the function that frees the command buffer, preventing the system from crashing. The next update will remove the ring parameter entirely.
This vulnerability could lead to system crashes by causing the graphics driver to reference invalid data, disrupting normal operations and potentially causing a denial of service.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.