Vulnerability in drm/amd/amdgpu/amdgpu_cs Package: Refcount Leak of a dma_fence Object
Summary
GSD-2022-1001417: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj. Affects Kernel versions < b6d1f7d97c81ebaf2cda9c4c943ee2e484fffdcf. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The drm/amd/amdgpu/amdgpu_cs package is a component of the Linux Kernel ecosystem. It provides support for the AMD GPU driver and is responsible for managing command submission to the GPU. The package handles the creation and execution of command streams, ensuring proper synchronization and resource management. However, a vulnerability has been discovered in this package that leads to a refcount leak of a dma_fence object.
Vulnerability Detail
The vulnerability in the drm/amd/amdgpu/amdgpu_cs package results in a refcount leak of a dma_fence object. This can potentially lead to resource exhaustion and denial-of-service attacks. An attacker could exploit this vulnerability to exhaust system resources, causing instability or crashes. The issue originates from a failure to properly release the reference count of the dma_fence object, resulting in a memory leak. This vulnerability has been addressed in Linux Kernel version v5.16.20 by commit b6d1f7d97c81ebaf2cda9c4c943ee2e484fffdcf.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is advised to update the Linux Kernel to the latest version as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in the drm/amd/amdgpu/amdgpu_cs package, leading to a refcount leak of a dma_fence object, has been addressed in Linux Kernel version v5.16.20. It is crucial to update the kernel to this version or later to ensure the fix is applied and protect the system from potential resource exhaustion and denial-of-service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to resource exhaustion and denial-of-service attacks, potentially causing system instability or crashes.
An attacker can exploit this vulnerability by triggering the refcount leak of the dma_fence object, causing resource exhaustion and potential system instability.
There is no known exploit available at the moment. However, it is crucial to update the Linux Kernel to the patched version to mitigate any potential risks.
The vulnerability is present in versions prior to v5.16.20. Updating to this version or later ensures the fix is applied and the vulnerability is mitigated.
More information about the fix and vulnerability can be found in the references link provided in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
