CVE-2023-54261

What it actually does

Missing assignment of mqd_stride callback for gfx11 in the AMD KFD MQD manager causes a NULL pointer dereference when debugfs operations access multi-XCC MQD management structures in the Linux kernel.

Why it matters to the business

Systems using recent AMD GPUs may experience unexpected kernel crashes or instability during graphics debugging or driver introspection, leading to downtime on affected Linux deployments until patched.

How an attack unfolds

An attacker with local access triggers debugfs reads or writes that invoke the unassigned mqd_stride function pointer on gfx11 hardware, resulting in a kernel NULL dereference crash.

How to fix it

Upgrade the Linux kernel to a fixed version such as 6.5.4 or apply the commit 399b73d6b7720a9eae68a333193b53ed4f432fe5 that assigns the missing gfx11 MQD manager callbacks.

How to confirm the fix worked

Verify the running kernel contains the mqd_stride assignment for gfx11 by inspecting the amdkfd source or confirming the kernel version meets or exceeds the listed fixed releases.

Typical attack path

1. Obtain local user access on a Linux system with AMD gfx11 hardware
2. Interact with KFD debugfs interfaces that exercise MQD management
3. Trigger the missing callback path to dereference a NULL function pointer
4. Cause kernel panic or denial of service

How to detect it

Review kernel logs for NULL pointer dereference oops originating from amdkfd debugfs paths on systems with AMD GPUs; no public exploitation artifacts are known.

What your security team should do

• Prioritize kernel updates on all systems with AMD gfx11 GPUs
• Monitor for kernel oops or panic logs related to amdkfd debugfs
• Restrict debugfs access to privileged users until patched