Linux kernel (amdgpu) vulnerabilities

A vulnerability has been identified in the Linux kernel regarding the validation of the doorbell_offset parameter during user queue creation in amdgpu. Lack of proper bounds checking may lead to corruption of the doorbell space in the kernel.

A vulnerability related to sync handling in amdgpu has been resolved in the Linux kernel. Invalidating a dmabuf can impact other users of the shared buffer object (BO).

A vulnerability in the Linux kernel related to amdgpu has been resolved, which occurred under low memory conditions. In such situations, the kmalloc function could fail, requiring the mutex to be unlocked for a clean exit.

In the Linux kernel, the amdgpu_gem_va_ioctl function in the AMDGPU driver has a dma_fence reference management flaw leading to refcount underflow and use-after-free. This can cause a kernel panic during GPU timeline updates.