Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52678
HistoryMay 17, 2024 - 12:00 a.m.

CVE-2023-52678

2024-05-1700:00:00
ubuntu.com
ubuntu.com
2
linux kernel
vulnerability
amdgpu
kfd_topology
empty list
list_first_entry
cve-2023-52678

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in
kfd_topology.c Before using list_first_entry, make sure to check that list
is not empty, if list is empty return -ENODATA. Fixes the below:
drivers/gpu/drm/amd/amdgpu/…/amdkfd/kfd_topology.c:1347
kfd_create_indirect_link_prop() warn: can ‘gpu_link’ even be NULL?
drivers/gpu/drm/amd/amdgpu/…/amdkfd/kfd_topology.c:1428
kfd_add_peer_prop() warn: can ‘iolink1’ even be NULL?
drivers/gpu/drm/amd/amdgpu/…/amdkfd/kfd_topology.c:1433
kfd_add_peer_prop() warn: can ‘iolink2’ even be NULL?

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%