Executive brief
A vulnerability was identified in the Linux kernel's AMD GPU driver where the system could fail to properly release a lock during low-memory situations. This component is responsible for managing graphics hardware resources. If exploited, this could lead to a system hang or instability, potentially allowing a local user to cause a denial-of-service condition.
Technical details
A resource management issue exists in the amdgpu_cs_parser_bos function within drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c. When the kernel experiences low memory conditions, a call to amdgpu_hmm_range_alloc (which utilizes kmalloc) can fail. In the original code, this failure triggered an immediate return of -ENOMEM without unlocking the associated mutex or performing necessary cleanup. This results in a mutex leak, which can lead to a kernel deadlock or denial-of-service. The fix introduces a proper jump to the 'out_free_user_pages' label to ensure the mutex is released and the parser is cleaned up correctly.
Affected products
- Linux Linux Kernel Versions prior to 6.14-rc1
Timeline
- 2026-02-03: other: Initial fix authored by Sunil Khatri
- 2026-02-26: patched: Patch committed to stable tree
- 2026-05-27: disclosed: CVE published