Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to init user queue The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter. GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling. However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected fb91065851cd5f2735348c5f3eddeeca3d7c2973 before ae5ab1c1ae504f622cc1ff48830a9ed48428146d; affected fb91065851cd5f2735348c5f3eddeeca3d7c2973 before 091a68c58c1bbd2ab7d05d1b32c1306394ec691d; affected fb91065851cd5f2735348c5f3eddeeca3d7c2973 before a33f7f9660705fb2ecf3467b2c48965564f392ce |
| Linux / Linux | affected 6.12; unaffected 0 before 6.12; unaffected 6.12.16 through 6.12.*; unaffected 6.13.4 through 6.13.*; unaffected 6.14 through * |
CWE
No CWE identifiers supplied.