In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix call trace warning and hang when removing amdgpu device
On GPUs with RAS enabled, below call trace and hang are observed when shutting down device.
v2: use DRM device unplugged flag instead of shutdown flag as the check to prevent memory wipe in shutdown stage.
[ +0.000000] RIP: 0010:amdgpuvrammgrfini+0x18d/0x1c0 [amdgpu] [ +0.000001] PKRU: 55555554 [ +0.000001] Call Trace: [ +0.000001] <TASK> [ +0.000002] amdgputtmfini+0x140/0x1c0 [amdgpu] [ +0.000183] amdgpubofini+0x27/0xa0 [amdgpu] [ +0.000184] gmcv110swfini+0x2b/0x40 [amdgpu] [ +0.000163] amdgpudevicefinisw+0xb6/0x510 [amdgpu] [ +0.000152] amdgpudriverreleasekms+0x16/0x30 [amdgpu] [ +0.000090] drmdevrelease+0x28/0x50 [drm] [ +0.000016] devmdrmdevinitrelease+0x38/0x60 [drm] [ +0.000011] devmactionrelease+0x15/0x20 [ +0.000003] releasenodes+0x40/0xc0 [ +0.000001] devresreleaseall+0x9e/0xe0 [ +0.000001] deviceunbindcleanup+0x12/0x80 [ +0.000003] devicereleasedriverinternal+0xff/0x160 [ +0.000001] driverdetach+0x4a/0x90 [ +0.000001] busremovedriver+0x6c/0xf0 [ +0.000001] driverunregister+0x31/0x50 [ +0.000001] pciunregisterdriver+0x40/0x90 [ +0.000003] amdgpuexit+0x15/0x120 [amdgpu]
{ "vanir_signatures": [ { "signature_version": "v1", "target": { "function": "amdgpu_bo_release_notify", "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f06b902511ea05526f405ee64da54a8313d91831", "deprecated": false, "digest": { "length": 848.0, "function_hash": "86468457906502471540702329837627303161" }, "id": "CVE-2023-53036-08d9e1c2" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93bb18d2a873d2fa9625c8ea927723660a868b95", "deprecated": false, "digest": { "line_hashes": [ "60028342854467098312046198041514623725", "335103521634050463436828177037948286540", "172923858725928191611428543649821766453", "269580294160453283966170182692147495636" ], "threshold": 0.9 }, "id": "CVE-2023-53036-3247ccec" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f06b902511ea05526f405ee64da54a8313d91831", "deprecated": false, "digest": { "line_hashes": [ "60028342854467098312046198041514623725", "335103521634050463436828177037948286540", "172923858725928191611428543649821766453", "269580294160453283966170182692147495636" ], "threshold": 0.9 }, "id": "CVE-2023-53036-4ae41d9d" }, { "signature_version": "v1", "target": { "function": "amdgpu_bo_release_notify", "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93bb18d2a873d2fa9625c8ea927723660a868b95", "deprecated": false, "digest": { "length": 848.0, "function_hash": "86468457906502471540702329837627303161" }, "id": "CVE-2023-53036-8bdadb4e" }, { "signature_version": "v1", "target": { "function": "amdgpu_bo_release_notify", "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a02dae3bbfe2df8e1c81e61a08695709e9588f9", "deprecated": false, "digest": { "length": 848.0, "function_hash": "86468457906502471540702329837627303161" }, "id": "CVE-2023-53036-94cefdf7" }, { "signature_version": "v1", "target": { "file": "drivers/gpu/drm/amd/amdgpu/amdgpu_object.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a02dae3bbfe2df8e1c81e61a08695709e9588f9", "deprecated": false, "digest": { "line_hashes": [ "60028342854467098312046198041514623725", "335103521634050463436828177037948286540", "172923858725928191611428543649821766453", "269580294160453283966170182692147495636" ], "threshold": 0.9 }, "id": "CVE-2023-53036-dc1fd391" } ] }