Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy_to_user failure If kfd_dbg_trap_enable() fails while copying runtime_info to userspace, it had already activated the trap, set debug_trap_enabled, taken an extra process reference, and opened the debug event file. Return -EFAULT without unwinding that state, leaving inconsistent trap state and a refcount imbalance that could break later DISABLE/ENABLE. On copy_to_user failure, deactivate the trap and undo the rest of the enable setup before returning.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to < 641be20110cdfb6d921605adb42a764a0fccac54affected0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to < 656a40bdc20def58790b8512e6000195436d8855affected0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to < 1b39f46eec2f907417d4955bb88434170f94a8d8affected0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to < 01112e241e37f9ac98b6f418d93ce2e0b87b7ee0affected
Linux Linux
Default version status: affected
6.5affected0 to < 6.5unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected