CVE-2023-53816

A flaw was found in the Linux kernel related to improper synchronization in a filesystem allocation path. Under certain conditions, concurrent operations may access and modify shared kernel data structures without adequate locking. This race condition can result in inconsistent internal state, triggering kernel warnings, memory corruption, or a system crash.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires a local attacker with access to the KFD device on systems equipped with AMD GPU hardware. A race condition during buffer object translation allows a concurrent thread to free allocated memory, resulting in a use-after-free condition that can trigger a kernel crash or memory corruption. The flaw cannot be exploited remotely and does not affect systems lacking AMD graphical or compute accelerators.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.