7.8

CVE-2026-97429

drm/amdkfd: fix UAF race in destroy_queue_cpsch

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: fix UAF race in destroy_queue_cpsch

wait_on_destroy_queue() drops locks to wait for queue resume, allowing
a concurrent destroy to free the queue. Use is_being_destroyed flag to
serialize destruction.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a70a93fa568b4f05aba548dadb673703eccf5480
Version < 090b51e2dabf88c02c0b6b25ea672a8bddfba7d5
Status affected
Version a70a93fa568b4f05aba548dadb673703eccf5480
Version < 41144829f4645c2bd4cb501d34d253858f750c0a
Status affected
Version a70a93fa568b4f05aba548dadb673703eccf5480
Version < d98c8032c29944e1e572e1f49a0613d364fece0f
Status affected
Version a70a93fa568b4f05aba548dadb673703eccf5480
Version < ac081deaf16a639ea7dff2f285fe421a33c1ade0
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.5
Status affected
Version 0
Version < 6.5
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/41144829f4645c2bd4cb501d34d253858f750c0a
https://git.kernel.org/stable/c/d98c8032c29944e1e572e1f49a0613d364fece0f
https://git.kernel.org/stable/c/ac081deaf16a639ea7dff2f285fe421a33c1ade0
https://git.kernel.org/stable/c/090b51e2dabf88c02c0b6b25ea672a8bddfba7d5