Executive Summary

This vulnerability is a use-after-free race condition in the Linux kernel's drm/amdgpu driver. It occurs when parent and child processes that share a drm_file both try to acquire the same virtual memory (VM) after a fork() system call. The issue arises because the assignment to vm->process_info was non-atomic, allowing a race condition. The fix replaces this assignment with an atomic compare-and-exchange operation (cmpxchg) to prevent the race.

Useful 0 Not Useful 0

Impact Analysis

This use-after-free race condition could potentially lead to memory corruption or unexpected behavior in the drm/amdgpu driver when processes share a drm_file and attempt to acquire the same VM concurrently. Such issues might cause system instability, crashes, or security risks such as privilege escalation or information disclosure, depending on how the corrupted memory is exploited.

Useful 0 Not Useful 0