Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() If the number of pages from the userptr BO differs from the SG BO then the allocated memory for the SG table doesn't get freed before returning -EINVAL, which may lead to a memory leak in some error paths. Fix this by checking the number of pages before allocating memory for the SG table.

References 3

• git.kernel.org https://git.kernel.org/stable/c/304a10161696d86300ceab1cbe72b2d74b8cdd94
• git.kernel.org https://git.kernel.org/stable/c/90bfee142af0f0e9d3bec80e7acd5f49b230acf7
• git.kernel.org https://git.kernel.org/stable/c/c6dc4c9ba093829ebe1450d5fb101da6fb7a2a58

Remediation