{"id":"DEBIAN-CVE-2023-52632","details":"In the Linux kernel, the following vulnerability has been resolved:  drm/amdkfd: Fix lock dependency warning with srcu  ====================================================== WARNING: possible circular locking dependency detected 6.5.0-kfd-yangp #2289 Not tainted ------------------------------------------------------ kworker/0:2/996 is trying to acquire lock:         (srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x5/0x1a0  but task is already holding lock:         ((work_completion)(&svms-\u003edeferred_list_work)){+.+.}-{0:0}, at: \tprocess_one_work+0x211/0x560  which lock already depends on the new lock.  the existing dependency chain (in reverse order) is:  -\u003e #3 ((work_completion)(&svms-\u003edeferred_list_work)){+.+.}-{0:0}:         __flush_work+0x88/0x4f0         svm_range_list_lock_and_flush_work+0x3d/0x110 [amdgpu]         svm_range_set_attr+0xd6/0x14c0 [amdgpu]         kfd_ioctl+0x1d1/0x630 [amdgpu]         __x64_sys_ioctl+0x88/0xc0  -\u003e #2 (&info-\u003elock#2){+.+.}-{3:3}:         __mutex_lock+0x99/0xc70         amdgpu_amdkfd_gpuvm_restore_process_bos+0x54/0x740 [amdgpu]         restore_process_helper+0x22/0x80 [amdgpu]         restore_process_worker+0x2d/0xa0 [amdgpu]         process_one_work+0x29b/0x560         worker_thread+0x3d/0x3d0  -\u003e #1 ((work_completion)(&(&process-\u003erestore_work)-\u003ework)){+.+.}-{0:0}:         __flush_work+0x88/0x4f0         __cancel_work_timer+0x12c/0x1c0         kfd_process_notifier_release_internal+0x37/0x1f0 [amdgpu]         __mmu_notifier_release+0xad/0x240         exit_mmap+0x6a/0x3a0         mmput+0x6a/0x120         do_exit+0x322/0xb90         do_group_exit+0x37/0xa0         __x64_sys_exit_group+0x18/0x20         do_syscall_64+0x38/0x80  -\u003e #0 (srcu){.+.+}-{0:0}:         __lock_acquire+0x1521/0x2510         lock_sync+0x5f/0x90         __synchronize_srcu+0x4f/0x1a0         __mmu_notifier_release+0x128/0x240         exit_mmap+0x6a/0x3a0         mmput+0x6a/0x120         svm_range_deferred_list_work+0x19f/0x350 [amdgpu]         process_one_work+0x29b/0x560         worker_thread+0x3d/0x3d0  other info that might help us debug this: Chain exists of:   srcu --\u003e &info-\u003elock#2 --\u003e (work_completion)(&svms-\u003edeferred_list_work)  Possible unsafe locking scenario:          CPU0                    CPU1         ----                    ----         lock((work_completion)(&svms-\u003edeferred_list_work));                         lock(&info-\u003elock#2); \t\t\tlock((work_completion)(&svms-\u003edeferred_list_work));         sync(srcu);","modified":"2026-09-15T09:02:37.894114051Z","published":"2024-04-02T07:15:41.010Z","upstream":["CVE-2023-52632"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-52632"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.82-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52632.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52632.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52632.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}