Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy_to_user failure If kfd_dbg_trap_enable() fails while copying runtime_info to userspace, it had already activated the trap, set debug_trap_enabled, taken an extra process reference, and opened the debug event file. Return -EFAULT without unwinding that state, leaving inconsistent trap state and a refcount imbalance that could break later DISABLE/ENABLE. On copy_to_user failure, deactivate the trap and undo the rest of the enable setup before returning.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 641be20110cdfb6d921605adb42a764a0fccac54; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 656a40bdc20def58790b8512e6000195436d8855; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1b39f46eec2f907417d4955bb88434170f94a8d8; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 01112e241e37f9ac98b6f418d93ce2e0b87b7ee0; affected 0 before 6.6.158; affected 0 before 6.12.111; affected 0 before 6.18.53 |
| Linux / Linux | unaffected 6.6.158 through 6.6.*; unaffected 6.12.111 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.