Threats tagged 'ghsa-92v9-7pjw-5r2v'

A use-after-free (UAF) race condition vulnerability in the Linux kernel's drm/amdkfd component was resolved. The flaw occurred in the destroy_queue_cpsch function where wait_on_destroy_queue() drops locks to wait for queue resume, allowing a concurrent destroy operation to free the queue improperly. The fix involves using an is_being_destroyed flag to serialize destruction and prevent the race condition.