NetSight
IP …
high7.8

CVE-2023-52691

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_state.…

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free some fields of adev. However, when the control flow returns to si_dpm_sw_init, it goes to label dpm_failed and calls si_dpm_fini, which calls amdgpu_free_extended_power_table again and free those fields again. Thus a double-free is triggered.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.9 before 4.19.306
from 4.20 before 5.4.268
from 5.5 before 5.10.209
from 5.11 before 5.15.148
from 5.16 before 6.1.75
from 6.2 before 6.6.14
DebianDebian Linux
Version 10.0

Weakness classification

CWE-415

References