Executive brief
A vulnerability was identified in the Linux kernel's AMD graphics driver (amdgpu). This issue occurs when the system fails to properly manage memory locks during the cleanup of graphics resources. An attacker with local access could potentially exploit this to cause a system crash or instability, leading to a denial of service.
Technical details
A locking issue exists in the Linux kernel's drm/amdgpu driver within the amdgpu_vm.c component. Specifically, the Root PD BO (Page Directory Buffer Object) is not reserved before unmapping and removing a bo_va from the VM, which violates expected locking semantics and triggers lockdep warnings or potential kernel panics. The vulnerability is reachable via the amdgpu_driver_postclose_kms path during process termination or file closure. An attacker with local user privileges can trigger this condition to cause a denial of service (system crash). The issue has been resolved in various stable branches including 6.4.12 and later.
Affected products
- Linux Linux Kernel from 4.2 up to 6.4.12
Timeline
- 2023-05-06: other: Patch authored by Lang Yu
- 2023-06-09: patched: Mainline fix committed
- 2025-10-04: advisory: CVE published by kernel.org