Linux kernel (drm/amdgpu) vulnerabilities

In the Linux kernel, amdgpu_vram_mgr_init() in the drm/amdgpu driver calls drmm_cgroup_register_region() before initializing lists and the buddy allocator. On failure, an early return bypasses those initializations, and the teardown path then dereferences NULL pointers, causing a kernel panic on the module load error path.

In the Linux kernel, uvd_v7_0_sw_init() does not initialize the UVD decode ring for an SR-IOV VF, yet amdgpu_uvd_resume() unconditionally force-completes that ring when restoring its fence sequence. This operates on an uninitialized ring.

In the Linux kernel, the drm/amdgpu driver can cause a GPU page fault after hibernation and resume in a PF passthrough environment. The partition mode is not restored on resume, leading to incorrect registers and wrong stride size when accessing the MQD BO, causing out-of-bounds access. The fix ensures gfx_v9_4_3_switch_compute_partition() is called on resume from hibernation.