mbox series

[UBUNTU,Focal,0/1] CVE-2022-3108

Message ID 20230303122839.320821-1-cascardo@canonical.com
Headers show
Series CVE-2022-3108 | expand

Message

Thadeu Lima de Souza Cascardo March 3, 2023, 12:28 p.m. UTC
[Impact]
An allocation failure during amdgpu initialization may lead to a NULL
pointer dereference.

[Test case]
The driver was loaded, as it can be loaded even on systems without the card,
and the affected path will be executed (a kfd device is created).

[Potential regression]
amdgpu users may have problems with the graphics system.

Jiasheng Jiang (1):
  drm/amdkfd: Check for null pointer after calling kmemdup

 drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 3 +++
 1 file changed, 3 insertions(+)

Comments

Tim Gardner March 6, 2023, 2:28 p.m. UTC | #1
On 3/3/23 5:28 AM, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> An allocation failure during amdgpu initialization may lead to a NULL
> pointer dereference.
> 
> [Test case]
> The driver was loaded, as it can be loaded even on systems without the card,
> and the affected path will be executed (a kfd device is created).
> 
> [Potential regression]
> amdgpu users may have problems with the graphics system.
> 
> Jiasheng Jiang (1):
>    drm/amdkfd: Check for null pointer after calling kmemdup
> 
>   drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 3 +++
>   1 file changed, 3 insertions(+)
> 
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Stefan Bader March 13, 2023, 10:40 a.m. UTC | #2
On 03.03.23 13:28, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> An allocation failure during amdgpu initialization may lead to a NULL
> pointer dereference.
> 
> [Test case]
> The driver was loaded, as it can be loaded even on systems without the card,
> and the affected path will be executed (a kfd device is created).
> 
> [Potential regression]
> amdgpu users may have problems with the graphics system.
> 
> Jiasheng Jiang (1):
>    drm/amdkfd: Check for null pointer after calling kmemdup
> 
>   drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 3 +++
>   1 file changed, 3 insertions(+)
> 

Applied to focal:linux/master-next. Thanks.

-Stefan