In the Linux kernel before 6.4.12, amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
{ "urgency": "not yet assigned" }