In the Linux kernel before 6.4.12, amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-51042.json"
[
{
"source": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628",
"digest": {
"function_hash": "100467384982343437407501309252193352733",
"length": 654.0
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "amdgpu_cs_wait_all_fences",
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
},
"id": "CVE-2023-51042-07352cc0"
},
{
"source": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628",
"digest": {
"line_hashes": [
"93982160804134426615874577931437531880",
"17027081893963159863988410382743877342",
"331296637217136298486734984355408535508",
"333792256648284029448828213471483069935",
"302455286245931212542474445344643677861",
"158231287413709177955899574774686592358",
"106521601891733920993366585818100611600",
"110607254048495696587505872736754173905",
"237718554412398131900394605491826661147",
"261724322097904284455809592440778655954",
"186733438593090265378806534932777589883"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
},
"id": "CVE-2023-51042-441616e2"
}
]