Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's AMD GPU driver (AMDKFD) has been addressed, which involved a leak of process references when user pointer memory was unmapped. The issue arose because the function 'kfd_lookup_process_by_pid' was called as a parameter, leading to a reference count leak and a missed null pointer check if the application process had already been destroyed. This vulnerability could potentially disrupt the proper handling of segmentation fault events sent to user space, by allowing references to destroyed processes to be improperly managed.
The vulnerability could lead to a reference count leak of the KFD process, causing improper management of process references and potentially allowing for use-after-free conditions.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.