Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqm_create_queue() When MES is enabled and amdgpu_amdkfd_alloc_kernel_mem() fails during the first queue creation for a process, pqm_create_queue() returns early via 'return retval' without going through the err_create_queue cleanup label. This means clear_bit(*qid, pqm->queue_slot_bitmap) is never called, leaving the reserved QID bit permanently set in queue_slot_bitmap. Over time this leaks QID slots, potentially exhausting all available queue slots. Fix this by replacing 'return retval' with 'goto err_allocate_pqn' so that clear_bit() is always called on the error path without touching the uninitialized pqn pointer. AILIKFD-813 (cherry picked from commit a107f74c38edbb80d6ab64dcaeeb292c14e9779f)
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 0f88894aa628680747ae27760e5f627f901a435f before 8924e2594a15bdbd07f8696770864366d787ab70; affected c0ef1c8ef70bfa3487ea84f794d7a1f0fea0735d before 2ff5bb3645c72b3690e70c513a62a86600c4632f; affected fddc45026311c05a5355fd34b9dc0a1d7eaef4a2 before 5f0f2ddeac738e2ca9d12cb76a1ff2904e85ecc3; affected fddc45026311c05a5355fd34b9dc0a1d7eaef4a2 before 7c35bf94150d872e670a6632aa819d320279effb; affected fddc45026311c05a5355fd34b9dc0a1d7eaef4a2 before 38b73293f38658a4685ffcea666462024f858ad9; affected 9d61e2b81f5fc90c87975879809346e7c90ea5f9; affected d86ba913bbfd1afafacbfb750001ffc6bfe29da0; affected 6.6.87 before 6.6.151; affected 6.12.23 before 6.12.103; affected 6.13.11 before 6.14; affected 6.14.2 before 6.15 |
| Linux / Linux | affected 6.15; unaffected 0 before 6.15; unaffected 6.6.151 through 6.6.*; unaffected 6.12.103 through 6.12.*; unaffected 6.18.44 through 6.18.*; unaffected 7.1.8 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/8924e2594a15bdbd07f8696770864366d787ab70
- https://git.kernel.org/stable/c/2ff5bb3645c72b3690e70c513a62a86600c4632f
- https://git.kernel.org/stable/c/5f0f2ddeac738e2ca9d12cb76a1ff2904e85ecc3
- https://git.kernel.org/stable/c/7c35bf94150d872e670a6632aa819d320279effb
- https://git.kernel.org/stable/c/38b73293f38658a4685ffcea666462024f858ad9