Vulnerability in drm/amdkfd Package: Ensure mm remain valid in svm deferred_list work
Summary
GSD-2022-1001414: drm/amdkfd: Ensure mm remain valid in svm deferred_list work. Affects Kernel versions < 84771f82b6459668cbeae544a13ca05e64c6ee7d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amdkfd package is a component of the Linux Kernel that provides support for AMD GPUs in the kernel's Direct Rendering Manager (DRM) subsystem. It includes the AMD Kernel Fusion Driver (KFD) module, which enables GPU compute functionality. The package allows for the management of shared virtual memory (svm) between the CPU and GPU. This vulnerability specifically affects the svm deferred_list work in the package.
Vulnerability Detail
The vulnerability in the drm/amdkfd package arises from a failure to ensure that the mm (memory management) remains valid during svm deferred_list work. This can lead to various security issues, although the exact impact and attack plausibility have not been proven. Attackers may potentially exploit this vulnerability to gain unauthorized access, escalate privileges, or cause denial-of-service conditions. The vulnerability has been addressed in the Linux Kernel version v5.16.20 through commit 84771f82b6459668cbeae544a13ca05e64c6ee7d.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to follow the recommended fix and update the Linux Kernel to the latest version.
Conclusion
In conclusion, the vulnerability in the drm/amdkfd package can potentially lead to security issues related to svm deferred_list work. It is crucial to update the Linux Kernel to version v5.16.20 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The drm/amdkfd package is a component of the Linux Kernel that provides support for AMD GPUs in the kernel's Direct Rendering Manager (DRM) subsystem. It includes the AMD Kernel Fusion Driver (KFD) module, which enables GPU compute functionality.
The impact of this vulnerability is not yet proven, but it could potentially allow attackers to gain unauthorized access, escalate privileges, or cause denial-of-service conditions.
To fix this vulnerability, update the Linux Kernel to version v5.16.20 or later. Pull the latest changes from the official Linux Kernel repository using the command: $ git pull https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
No specific workaround is mentioned for this vulnerability. It is recommended to update the Linux Kernel to the latest version.
For more information about this vulnerability, refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
