Linux Kernel amdkfd Gang Context Buffer Memory Management Vulnerability

Vulnerability

A vulnerability in the Linux kernel's amdkfd component relates to improper memory management of gang context buffer objects. The issue arises when the user queue initialization fails, leading to a failure to correctly free the associated graphics translation table (GTT) memory. The vulnerability is rooted in the function 'amdgpu_amdkfd_free_gtt_mem', which is designed to handle GTT memory objects but can encounter errors when void pointers are improperly passed and dereferenced. This mismanagement can potentially lead to memory leaks or corruption.

Impact

The vulnerability could cause memory management issues, such as leaks or corruption, which might be exploitable under certain conditions.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.