Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Xiaogang Chen

Pesquisador deAMD
#46215de 53,635
5.5CVSS total
Vulnerabilidades · 1
PT-2023-9769
5.5
2023-09-28
Linux · Linux Kernel · CVE-2023-52825
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a race condition in the drm/amdkfd component of the Linux kernel, specifically in the svm code. This condition can lead to a "use-after-free" error, potentially allowing an attacker to elevate their privileges. The vulnerability is caused by the unref operation of `svm bo` happening in both mmu callback and a callback after migrating to system RAM, which are asynchronous calls in different tasks. To avoid this issue, the svm bo unref operation needs to be synchronized. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.