Executive Summary

This vulnerability exists in the Linux kernel's amdgpu driver, specifically in the function amdgpu_gmc_get_nps_memranges(). The issue arises because the function amdgpu_discovery_get_nps_info() allocates memory using kvcalloc(), which may internally use vmalloc() for large allocations. However, the code incorrectly uses kfree() to free this memory, which is unsafe for vmalloc-allocated memory and can lead to memory corruption.

The fix involves replacing kfree() with kvfree(), which correctly handles freeing memory allocated by both kmalloc and vmalloc, preventing memory corruption.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to memory corruption in the Linux kernel when the amdgpu driver frees memory incorrectly. Memory corruption can cause system instability, crashes, or unpredictable behavior, potentially affecting the reliability and security of systems using the affected driver.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability is resolved by using kvfree() instead of kfree() in the amdgpu_gmc_get_nps_memranges() function to safely handle memory allocated by kvcalloc(), which may use vmalloc().

Immediate mitigation steps include updating the Linux kernel to a version where this fix is applied, ensuring that the amdgpu driver uses kvfree() for memory deallocation in the affected function.

Useful 0 Not Useful 0