cve/published/2024/CVE-2024-57920.json

{
   "containers": {
      "cna": {
         "providerMetadata": {
            "orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038"
         },
         "descriptions": [
            {
               "lang": "en",
               "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: wq_release signals dma_fence only when available\n\nkfd_process_wq_release() signals eviction fence by\ndma_fence_signal() which wanrs if dma_fence\nis NULL.\n\nkfd_process->ef is initialized by kfd_process_device_init_vm()\nthrough ioctl. That means the fence is NULL for a new\ncreated kfd_process, and close a kfd_process right\nafter open it will trigger the warning.\n\nThis commit conditionally signals the eviction fence\nin kfd_process_wq_release() only when it is available.\n\n[  503.660882] WARNING: CPU: 0 PID: 9 at drivers/dma-buf/dma-fence.c:467 dma_fence_signal+0x74/0xa0\n[  503.782940] Workqueue: kfd_process_wq kfd_process_wq_release [amdgpu]\n[  503.789640] RIP: 0010:dma_fence_signal+0x74/0xa0\n[  503.877620] Call Trace:\n[  503.880066]  <TASK>\n[  503.882168]  ? __warn+0xcd/0x260\n[  503.885407]  ? dma_fence_signal+0x74/0xa0\n[  503.889416]  ? report_bug+0x288/0x2d0\n[  503.893089]  ? handle_bug+0x53/0xa0\n[  503.896587]  ? exc_invalid_op+0x14/0x50\n[  503.900424]  ? asm_exc_invalid_op+0x16/0x20\n[  503.904616]  ? dma_fence_signal+0x74/0xa0\n[  503.908626]  kfd_process_wq_release+0x6b/0x370 [amdgpu]\n[  503.914081]  process_one_work+0x654/0x10a0\n[  503.918186]  worker_thread+0x6c3/0xe70\n[  503.921943]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  503.926735]  ? srso_alias_return_thunk+0x5/0xfbef5\n[  503.931527]  ? __kthread_parkme+0x82/0x140\n[  503.935631]  ? __pfx_worker_thread+0x10/0x10\n[  503.939904]  kthread+0x2a8/0x380\n[  503.943132]  ? __pfx_kthread+0x10/0x10\n[  503.946882]  ret_from_fork+0x2d/0x70\n[  503.950458]  ? __pfx_kthread+0x10/0x10\n[  503.954210]  ret_from_fork_asm+0x1a/0x30\n[  503.958142]  </TASK>\n[  503.960328] ---[ end trace 0000000000000000 ]---\n\n(cherry picked from commit 2774ef7625adb5fb9e9265c26a59dca7b8fd171e)"
            }
         ],
         "affected": [
            {
               "product": "Linux",
               "vendor": "Linux",
               "defaultStatus": "unaffected",
               "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               "programFiles": [
                  "drivers/gpu/drm/amd/amdkfd/kfd_process.c"
               ],
               "versions": [
                  {
                     "version": "967d226eaae8e40636d257bf8ae55d2c5a912f58",
                     "lessThan": "c8243def299793ac6c85fdc1086089c800c1051a",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "967d226eaae8e40636d257bf8ae55d2c5a912f58",
                     "lessThan": "a993d319aebb7cce8a10c6e685344b7c2ad5c4c2",
                     "status": "affected",
                     "versionType": "git"
                  }
               ]
            },
            {
               "product": "Linux",
               "vendor": "Linux",
               "defaultStatus": "affected",
               "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               "programFiles": [
                  "drivers/gpu/drm/amd/amdkfd/kfd_process.c"
               ],
               "versions": [
                  {
                     "version": "6.13",
                     "status": "affected"
                  },
                  {
                     "version": "0",
                     "lessThan": "6.13",
                     "status": "unaffected",
                     "versionType": "semver"
                  },
                  {
                     "version": "6.12.10",
                     "lessThanOrEqual": "6.12.*",
                     "status": "unaffected",
                     "versionType": "semver"
                  }
               ]
            }
         ],
         "cpeApplicability": [
            {
               "nodes": [
                  {
                     "operator": "OR",
                     "negate": false,
                     "cpeMatch": [
                        {
                           "vulnerable": true,
                           "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                           "versionStartIncluding": "6.13",
                           "versionEndExcluding": "6.12.10"
                        }
                     ]
                  }
               ]
            }
         ],
         "references": [
            {
               "url": "https://git.kernel.org/stable/c/c8243def299793ac6c85fdc1086089c800c1051a"
            },
            {
               "url": "https://git.kernel.org/stable/c/a993d319aebb7cce8a10c6e685344b7c2ad5c4c2"
            }
         ],
         "title": "drm/amdkfd: wq_release signals dma_fence only when available",
         "x_generator": {
            "engine": "bippy-1.2.0"
         }
      }
   },
   "cveMetadata": {
      "assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038",
      "cveID": "CVE-2024-57920",
      "requesterUserId": "gregkh@kernel.org",
      "serial": "1",
      "state": "PUBLISHED"
   },
   "dataType": "CVE_RECORD",
   "dataVersion": "5.0"
}