In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix a race condition of vram buffer unref in svm code
prange->svmbo unref can happen in both mmu callback and a callback after migrate to system ram. Both are async call in different tasks. Sync svmbo unref operation to avoid random "use-after-free".
{ "vanir_signatures": [ { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_svm.c" }, "id": "CVE-2023-52825-1426e6dc", "digest": { "line_hashes": [ "305982222103458878360034064126434238473", "343542786477064181353931278107750297", "105866790978226697305502514303600686738", "14075658171558640781454776208688865911", "291768663263452566608729892481438410759" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fc0210720127cc6302e6d6f3de48f49c3fcf5659" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_svm.c", "function": "svm_range_vram_node_free" }, "id": "CVE-2023-52825-26091f6e", "digest": { "length": 93.0, "function_hash": "267968381892316882053106894954342337226" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@709c348261618da7ed89d6c303e2ceb9e453ba74" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_svm.c", "function": "svm_range_vram_node_free" }, "id": "CVE-2023-52825-56f7ead6", "digest": { "length": 93.0, "function_hash": "267968381892316882053106894954342337226" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fc0210720127cc6302e6d6f3de48f49c3fcf5659" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_svm.c", "function": "svm_range_vram_node_free" }, "id": "CVE-2023-52825-6de51fd2", "digest": { "length": 93.0, "function_hash": "267968381892316882053106894954342337226" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d43cdd22cd81a2b079e864c4321b9aba4c6af34" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_svm.c" }, "id": "CVE-2023-52825-7e80a8e1", "digest": { "line_hashes": [ "305982222103458878360034064126434238473", "343542786477064181353931278107750297", "105866790978226697305502514303600686738", "14075658171558640781454776208688865911", "291768663263452566608729892481438410759" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@709c348261618da7ed89d6c303e2ceb9e453ba74" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_svm.c" }, "id": "CVE-2023-52825-b58eff82", "digest": { "line_hashes": [ "305982222103458878360034064126434238473", "343542786477064181353931278107750297", "105866790978226697305502514303600686738", "47387066548041654240371954274347807126", "22321596575005657639469918738400282904" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d43cdd22cd81a2b079e864c4321b9aba4c6af34" } ] }