CVE-2023-52825

drm/amdkfd: Fix a race condition of vram buffer unref in svm code

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix a race condition of vram buffer unref in svm code

prange->svm_bo unref can happen in both mmu callback and a callback after migrate to system ram. Both are async call in different tasks. Sync svm_bo unref operation to avoid random "use-after-free".

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before 7d43cdd22cd81a2b079e864c4321b9aba4c6af34Affected e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before 50f35a907c4f9ed431fd3dbb8b871ef1cbb0718eAffected e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before c772eacbd6d0845fc922af8716bb9d29ae27b8cfAffected e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before fc0210720127cc6302e6d6f3de48f49c3fcf5659Affected e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before 709c348261618da7ed89d6c303e2ceb9e453ba74Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before 7d43cdd22cd81a2b079e864c4321b9aba4c6af34Affected
e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before 50f35a907c4f9ed431fd3dbb8b871ef1cbb0718eAffected
e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before c772eacbd6d0845fc922af8716bb9d29ae27b8cfAffected
e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before fc0210720127cc6302e6d6f3de48f49c3fcf5659Affected
e49fe4040a10c1cd3b215c511f658d15aa7c8be9 to before 709c348261618da7ed89d6c303e2ceb9e453ba74Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.