Executive Summary

This vulnerability exists in the Linux kernel's drm/amdgpu/userq component. It involves improper handling of access to a stale write pointer (wptr) mapping during queue creation. Specifically, the issue arises when the wptr_obj is unmapped while a queue creation is still in progress, and another buffer object (bo) is passed at the same address. The fix involves using drm_exec to take both necessary locks (vm root bo and wptr_obj bo) to properly access the mapping data and prevent this unsafe condition.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could lead to security issues related to improper memory access or data corruption within the graphics subsystem of the Linux kernel. Accessing stale mappings or passing incorrect buffer objects at the same address during queue creation might allow attackers to cause unexpected behavior, potentially leading to system instability or unauthorized access to memory.

Useful 0 Not Useful 0