Null Pointer Vulnerability in AMD Systems on Linux Kernel due to PTDMA Driver Misconfiguration

CVE-2023-53755

What is CVE-2023-53755?

A vulnerability in the Linux kernel's dmaengine, specifically within the PTDMA driver, can cause system instability on AMD devices. When the pt_cmd_callback() function is called without adequate checks, it may be invoked with a NULL pointer if both the Submitted and Issued queues are empty. This can lead to a system panic during host shutdown after PTDMA driver activity, potentially endangering the stability and security of the affected systems. The vulnerability has been resolved in subsequent updates, ensuring better error handling for descriptor checks.

References