kernel security, bug fix, and enhancement update

4.18.0-425.3.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

GSD-2022-1006834 drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue()

drm/amdgpu: Fix memory leak in hpdrxirqcreateworkqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35001 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the use of an unlocked iterator in the SDMA update of the drm/amdgpu module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

[SECURITY] [DSA 5257-2] linux regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5257-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 23, 2022 https://www.debian.org/security/faq -...

PT-2022-34617 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a hive reference leak when adding an xgmi device in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

GSD-2022-1005109 drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex

drm/amdgpu: Fix use-after-free on amdgpubolist mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

PT-2022-33367 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.3 Description: The issue is related to a use-after-free error on the amdgpu bo list mutex. It was introduced in version v5.19 and fixed in version v5.19.4. The actual impact and attack plausibility ha...

PT-2025-38341

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the DRM/amdgpu subsystem where SDMA update page table operations may be called from an unlocked context. This occurs due to the use of an unlocked...

PT-2025-41020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the drm/amdgpu module within the Linux kernel, specifically within the hpd rx irq create workqueue function. If the creation of the work queue array for...

GSD-2022-1004043 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.

drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003838 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.

drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003748 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003603 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003375 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003093 drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init

drm/amdgpu/psp: move PSP memory alloc from hwinit to swinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002830 drm/amdgpu/pm: fix the null pointer while the smu is disabled

drm/amdgpu/pm: fix the null pointer while the smu is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002816 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002813 drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init

drm/amdgpu/psp: move PSP memory alloc from hwinit to swinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002322 drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj

drm/amd/amdgpu/amdgpucs: fix refcount leak of a dmafence obj This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002313 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...