CVE-2023-53087

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/active: Fix misuse of non-idle barriers as fence trackers

Users reported oopses on list corruptions when using i915 perf with a

number of concurrently running graphics applications. Root cause analysis

pointed at an issue in barrier processing code -- a race among perf open /

close replacing active barriers with perf requests on kernel context and

concurrent barrier preallocate / acquire operations performed during user

context first pin / last unpin.

When adding a request to a composite tracker, we try to reuse an existing

fence tracker, already allocated and registered with that composite. The

tracker we obtain may already track another fence, may be an idle barrier,

or an active barrier.

If the tracker we get occurs a non-idle barrier then we try to delete that

barrier from a list of barrier tasks it belongs to. However, while doing

that we don't respect return value from a function that performs the

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References