[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_device.c","drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c","drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"f39a3bc42815a7016a915f6cb35e9a1448788f06","lessThan":"dd450b513718dfeb4c637c9335d51a55ebcd4320","versionType":"git","status":"affected"},{"version":"1adb5ebe205e96af77a93512e2d5b8c437548787","lessThan":"d1bda2ab0cf956a16dd369a473a6c43dfbed5855","versionType":"git","status":"affected"},{"version":"e864180ee49b4d30e640fd1e1d852b86411420c9","lessThan":"07ed75bfa7ede8bfcfa303fd6efc85db1c8684c7","versionType":"git","status":"affected"},{"version":"e864180ee49b4d30e640fd1e1d852b86411420c9","lessThan":"1c0378830e42c98acd69e0289882c8637d92f285","versionType":"git","status":"affected"},{"version":"e864180ee49b4d30e640fd1e1d852b86411420c9","lessThan":"5c1741a0c176ae11675a64cb7f2dd21d72db6b91","versionType":"git","status":"affected"},{"version":"e864180ee49b4d30e640fd1e1d852b86411420c9","lessThan":"dc0297f3198bd60108ccbd167ee5d9fa4af31ed0","versionType":"git","status":"affected"},{"version":"e1ab38e99d1607f80a1670a399511a56464c0253","versionType":"git","status":"affected"},{"version":"6.1.105","lessThan":"6.1.162","versionType":"semver","status":"affected"},{"version":"6.6.46","lessThan":"6.6.123","versionType":"semver","status":"affected"},{"version":"6.10.5","lessThan":"6.11","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_device.c","drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c","drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.11","status":"affected"},{"version":"0","lessThan":"6.11","versionType":"semver","status":"unaffected"},{"version":"6.1.162","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffecte

kernel.org: https://git.kernel.org/stable/c/d1bda2ab0cf956a16dd369a473a6c43dfbed5855 Types: Patch

kernel.org: https://git.kernel.org/stable/c/dd450b513718dfeb4c637c9335d51a55ebcd4320 Types: Patch

https://git.kernel.org/stable/c/d1bda2ab0cf956a16dd369a473a6c43dfbed5855

https://git.kernel.org/stable/c/dd450b513718dfeb4c637c9335d51a55ebcd4320

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-362

OR
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6.46 up to (excluding) 6.7
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.1.105 up to (excluding) 6.2
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.13.11
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.14 up to (excluding) 6.14.2
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.10.5 up to (excluding) 6.12.39

kernel.org: https://git.kernel.org/stable/c/07ed75bfa7ede8bfcfa303fd6efc85db1c8684c7 Types: Patch

kernel.org: https://git.kernel.org/stable/c/1c0378830e42c98acd69e0289882c8637d92f285 Types: Patch

kernel.org: https://git.kernel.org/stable/c/5c1741a0c176ae11675a64cb7f2dd21d72db6b91 Types: Patch

kernel.org: https://git.kernel.org/stable/c/dc0297f3198bd60108ccbd167ee5d9fa4af31ed0 Types: Patch

https://git.kernel.org/stable/c/07ed75bfa7ede8bfcfa303fd6efc85db1c8684c7

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

RLCG Register Access is a way for virtual functions to safely access GPU
registers in a virtualized environment., including TLB flushes and
register reads. When multiple threads or VFs try to access the same
registers simultaneously, it can lead to race conditions. By using the
RLCG interface, the driver can serialize access to the registers. This
means that only one thread can access the registers at a time,
preventing conflicts and ensuring that operations are performed
correctly. Additionally, when a low-priority task holds a mutex that a
high-priority task needs, ie., If a thread holding a spinlock tries to
acquire a mutex, it can lead to priority inversion. register access in
amdgpu_virt_rlcg_reg_rw especially in a fast code path is critical.

The call stack shows that the function amdgpu_virt_rlcg_reg_rw is being
called, which attempts to acquire the mutex. This function is invoked
from amdgpu_sriov_wreg, which in turn is called from
gmc_v11_0_flush_gpu_tlb.

The [ BUG: Invalid wait context ] indicates that a thread is trying to
acquire a mutex while it is in a context that does not allow it to sleep
(like holding a spinlock).

Fixes the below:

[  253.013423] =============================
[  253.013434] [ BUG: Invalid wait context ]
[  253.013446] 6.12.0-amdstaging-drm-next-lol-050225 #14 Tainted: G     U     OE
[  253.013464] -----------------------------
[  253.013475] kworker/0:1/10 is trying to lock:
[  253.013487] ffff9f30542e3cf8 (&adev->virt.rlcg_reg_lock){+.+.}-{3:3}, at: amdgpu_virt_rlcg_reg_rw+0xf6/0x330 [amdgpu]
[  253.013815] other info that might help us debug this:
[  253.013827] context-{4:4}
[  253.013835] 3 locks held by kworker/0:1/10:
[  253.013847]  #0: ffff9f3040050f58 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x3f5/0x680
[  253.013877]  #1: ffffb789c008be40 ((work_completion)(&wfc.work)){+.+.}-{0:0},

https://git.kernel.org/stable/c/1c0378830e42c98acd69e0289882c8637d92f285

https://git.kernel.org/stable/c/5c1741a0c176ae11675a64cb7f2dd21d72db6b91

https://git.kernel.org/stable/c/dc0297f3198bd60108ccbd167ee5d9fa4af31ed0