In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix kfdprocessdeviceinitvm error handling
Should only destroy the ib_mem and let process cleanup worker to free the outstanding BOs. Reset the pointer in pdd->qpd structure, to avoid NULL pointer access in process destroy worker.
BUG: kernel NULL pointer dereference, address: 0000000000000010 Call Trace: amdgpuamdkfdgpuvmunmapgttbofromkernel+0x46/0xb0 [amdgpu] kfdprocessdevicedestroycwsrdgpu+0x40/0x70 [amdgpu] kfdprocessdestroypdds+0x71/0x190 [amdgpu] kfdprocesswqrelease+0x2a2/0x3b0 [amdgpu] processonework+0x2a1/0x600 worker_thread+0x39/0x3d0