In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix usage slab after free
[ +0.000021] BUG: KASAN: slab-use-after-free in drmschedentityflush+0x6cb/0x7a0 [gpusched] [ +0.000027] Read of size 8 at addr ffff8881b8605f88 by task amdpciunplug/2147
[ +0.000023] CPU: 6 PID: 2147 Comm: amdpciunplug Not tainted 6.10.0+ #1 [ +0.000016] Hardware name: ASUS System Product Name/ROG STRIX B550-F GAMING (WI-FI), BIOS 1401 12/03/2020 [ +0.000016] Call Trace: [ +0.000008] <TASK> [ +0.000009] dumpstacklvl+0x76/0xa0 [ +0.000017] printreport+0xce/0x5f0 [ +0.000017] ? drmschedentityflush+0x6cb/0x7a0 [gpusched] [ +0.000019] ? srsoreturnthunk+0x5/0x5f [ +0.000015] ? kasancompletemodereportinfo+0x72/0x200 [ +0.000016] ? drmschedentityflush+0x6cb/0x7a0 [gpusched] [ +0.000019] kasanreport+0xbe/0x110 [ +0.000015] ? drmschedentityflush+0x6cb/0x7a0 [gpusched] [ +0.000023] _asanreportload8noabort+0x14/0x30 [ +0.000014] drmschedentityflush+0x6cb/0x7a0 [gpusched] [ +0.000020] ? srsoreturnthunk+0x5/0x5f [ +0.000013] ? _kasancheckwrite+0x14/0x30 [ +0.000016] ? _pfxdrmschedentityflush+0x10/0x10 [gpusched] [ +0.000020] ? srsoreturnthunk+0x5/0x5f [ +0.000013] ? _kasancheckwrite+0x14/0x30 [ +0.000013] ? srsoreturnthunk+0x5/0x5f [ +0.000013] ? enablework+0x124/0x220 [ +0.000015] ? _pfxenablework+0x10/0x10 [ +0.000013] ? srsoreturnthunk+0x5/0x5f [ +0.000014] ? freelargekmalloc+0x85/0xf0 [ +0.000016] drmschedentitydestroy+0x18/0x30 [gpusched] [ +0.000020] amdgpuvceswfini+0x55/0x170 [amdgpu] [ +0.000735] ? _kasancheckread+0x11/0x20 [ +0.000016] vcev40swfini+0x80/0x110 [amdgpu] [ +0.000726] amdgpudevicefinisw+0x331/0xfc0 [amdgpu] [ +0.000679] ? mutexunlock+0x80/0xe0 [ +0.000017] ? _pfxamdgpudevicefinisw+0x10/0x10 [amdgpu] [ +0.000662] ? srsoreturnthunk+0x5/0x5f [ +0.000014] ? _kasancheckwrite+0x14/0x30 [ +0.000013] ? srsoreturnthunk+0x5/0x5f [ +0.000013] ? mutexunlock+0x80/0xe0 [ +0.000016] amdgpudriverreleasekms+0x16/0x80 [amdgpu] [ +0.000663] drmminorrelease+0xc9/0x140 [drm] [ +0.000081] drmrelease+0x1fd/0x390 [drm] [ +0.000082] _fput+0x36c/0xad0 [ +0.000018] _fputsync+0x3c/0x50 [ +0.000014] _x64sysclose+0x7d/0xe0 [ +0.000014] x64syscall+0x1bc6/0x2680 [ +0.000014] dosyscall64+0x70/0x130 [ +0.000014] ? srsoreturnthunk+0x5/0x5f [ +0.000014] ? irqentryexittousermode+0x60/0x190 [ +0.000015] ? srsoreturnthunk+0x5/0x5f [ +0.000014] ? irqentryexit+0x43/0x50 [ +0.000012] ? srsoreturnthunk+0x5/0x5f [ +0.000013] ? excpagefault+0x7c/0x110 [ +0.000015] entrySYSCALL64afterhwframe+0x76/0x7e [ +0.000014] RIP: 0033:0x7ffff7b14f67 [ +0.000013] Code: ff e8 0d 16 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 73 ba f7 ff [ +0.000026] RSP: 002b:00007fffffffe378 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ +0.000019] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffff7b14f67 [ +0.000014] RDX: 0000000000000000 RSI: 00007ffff7f6f47a RDI: 0000000000000003 [ +0.000014] RBP: 00007fffffffe3a0 R08: 0000555555569890 R09: 0000000000000000 [ +0.000014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffffffe5c8 [ +0.000013] R13: 00005555555552a9 R14: 0000555555557d48 R15: 00007ffff7ffd040 [ +0.000020] </TASK>
[ +0.000016] Allocated by task 383 on cpu 7 at 26.880319s: [ +0.000014] kasansavestack+0x28/0x60 [ +0.000008] kasansavetrack+0x18/0x70 [ +0.000007] kasansaveallocinfo+0x38/0x60 [ +0.000007] _kasankmalloc+0xc1/0xd0 [ +0.000007] kmalloctracenoprof+0x180/0x380 [ +0.000007] drmschedinit+0x411/0xec0 [gpusched] [ +0.000012] amdgpudeviceinit+0x695f/0xa610 [amdgpu] [ +0.000658] amdgpudriverloadkms+0x1a/0x120 [amdgpu] [ +0.000662] amdgpupci_p ---truncated---
[
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"96498108923499236401479774099040474436",
"228088078162667015226811256771286124711",
"320027783576146333003699034030031678230",
"44286215328604922730259807648970696747",
"296384120749295014952808567638782285818",
"251300483995171837066382865594893597179",
"162110527743472753037130475842006302173",
"76857492896112270330953568281519112502",
"24874865534634221349598918756871462098"
]
},
"id": "CVE-2024-56551-02881790",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6383199ada42d30562b4249c393592a2a9c38165",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_device.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"244278898145769651144930031485177099739",
"230699795618149301779012934512377903581",
"3781534135189465319013798885422156785",
"339941107570027863902347065099663725084",
"27865763047718575956354607554238756214"
]
},
"id": "CVE-2024-56551-4daeb815",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05b1b33936b71e5f189a813a517f72e8a27fcb2f",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"96498108923499236401479774099040474436",
"228088078162667015226811256771286124711",
"320027783576146333003699034030031678230",
"44286215328604922730259807648970696747",
"76577791047056993519622261138072586102",
"297497611439644622563245483406670821230",
"201653118429171908437531041768694562077",
"337670697621480363504423806262058259092",
"46459578301484955143711059148818586550"
]
},
"id": "CVE-2024-56551-57029100",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3cc1116de10953f0265a05d9f351b02a9ec3b497",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c",
"function": "amdgpu_vce_sw_fini"
},
"digest": {
"length": 447.0,
"function_hash": "61033775305551296865065726696341846077"
},
"id": "CVE-2024-56551-640ab843",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6383199ada42d30562b4249c393592a2a9c38165",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_device.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"244278898145769651144930031485177099739",
"230699795618149301779012934512377903581",
"151087149819543038415768181384766336167",
"248540665525160316464278456228234688388",
"253905828416518714180796090036621473309"
]
},
"id": "CVE-2024-56551-6ebf2151",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3990ef742c064e22189b954522930db04fc6b1a7",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"96498108923499236401479774099040474436",
"228088078162667015226811256771286124711",
"320027783576146333003699034030031678230",
"44286215328604922730259807648970696747",
"296384120749295014952808567638782285818",
"251300483995171837066382865594893597179",
"162110527743472753037130475842006302173",
"76857492896112270330953568281519112502",
"46459578301484955143711059148818586550"
]
},
"id": "CVE-2024-56551-6fb5da54",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3990ef742c064e22189b954522930db04fc6b1a7",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c",
"function": "amdgpu_vce_sw_fini"
},
"digest": {
"length": 447.0,
"function_hash": "61033775305551296865065726696341846077"
},
"id": "CVE-2024-56551-8328714b",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b61badd20b443eabe132314669bb51a263982e5c",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c",
"function": "amdgpu_vce_sw_fini"
},
"digest": {
"length": 445.0,
"function_hash": "327446832703730823514095391813618289283"
},
"id": "CVE-2024-56551-969f8e09",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3cc1116de10953f0265a05d9f351b02a9ec3b497",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_device.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"244278898145769651144930031485177099739",
"230699795618149301779012934512377903581",
"151087149819543038415768181384766336167",
"248540665525160316464278456228234688388",
"253905828416518714180796090036621473309"
]
},
"id": "CVE-2024-56551-ad7d7eae",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6383199ada42d30562b4249c393592a2a9c38165",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_device.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"244278898145769651144930031485177099739",
"230699795618149301779012934512377903581",
"151087149819543038415768181384766336167",
"248540665525160316464278456228234688388",
"253905828416518714180796090036621473309"
]
},
"id": "CVE-2024-56551-b010cc8e",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b61badd20b443eabe132314669bb51a263982e5c",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"96498108923499236401479774099040474436",
"228088078162667015226811256771286124711",
"320027783576146333003699034030031678230",
"44286215328604922730259807648970696747",
"76577791047056993519622261138072586102",
"297497611439644622563245483406670821230",
"201653118429171908437531041768694562077",
"337670697621480363504423806262058259092",
"46459578301484955143711059148818586550"
]
},
"id": "CVE-2024-56551-bc925964",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05b1b33936b71e5f189a813a517f72e8a27fcb2f",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"96498108923499236401479774099040474436",
"228088078162667015226811256771286124711",
"320027783576146333003699034030031678230",
"44286215328604922730259807648970696747",
"296384120749295014952808567638782285818",
"251300483995171837066382865594893597179",
"162110527743472753037130475842006302173",
"76857492896112270330953568281519112502",
"24874865534634221349598918756871462098"
]
},
"id": "CVE-2024-56551-d0f849b6",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b61badd20b443eabe132314669bb51a263982e5c",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c",
"function": "amdgpu_vce_sw_fini"
},
"digest": {
"length": 447.0,
"function_hash": "61033775305551296865065726696341846077"
},
"id": "CVE-2024-56551-d766e36f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3990ef742c064e22189b954522930db04fc6b1a7",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c",
"function": "amdgpu_vce_sw_fini"
},
"digest": {
"length": 445.0,
"function_hash": "327446832703730823514095391813618289283"
},
"id": "CVE-2024-56551-f0a2dae8",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05b1b33936b71e5f189a813a517f72e8a27fcb2f",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_device.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"24398094556070432207295780347100203919",
"106782963371477388110382090588266666032",
"99629645855858810227819282775791236791",
"339941107570027863902347065099663725084",
"27865763047718575956354607554238756214"
]
},
"id": "CVE-2024-56551-f4df040a",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3cc1116de10953f0265a05d9f351b02a9ec3b497",
"signature_version": "v1"
}
]