CVE-2023-54144: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54144 is a kernel warning vulnerability in the Linux kernel's drm/amdkfd subsystem, caused by improper initialization of a kobject during AMD GPU topology setup. The flaw occurs when the p2plink attribute is not correctly initialized before a sysfs file is created, leading to a kernel warning when kobject_put() is called on an uninitialized object. It affects the Linux kernel on systems with AMD GPUs using the amdgpu driver. The vulnerability was publicly disclosed on December 24, 2025, and has a CVSS v3.1 base score of 5.5 (Medium) (Red Hat CVE, Red Hat Bugzilla).

The root cause is improper initialization of a kernel object (CWE-908 or related uninitialized resource use) — specifically, the p2plink sysfs attribute kobject is not initialized before kfd_topology_update_sysfs() attempts to create the sysfs file, and the subsequent cleanup path calls kobject_put() on the uninitialized object. The call trace shows the fault path: kfd_remove_sysfs_node_entry → kfd_topology_update_sysfs → kfd_topology_add_device → kgd2kfd_device_init → amdgpu_amdkfd_device_init, triggered during AMD GPU driver load. Exploitation requires local access with low privileges (e.g., loading the amdgpu kernel module on a system with a compatible AMD GPU). The fix involves correctly initializing the p2plink attr before the sysfs file creation call (Red Hat Bugzilla).

Successful triggering of this vulnerability results in a kernel warning (WARN_ON) during AMD GPU driver initialization, which can cause driver load failure and denial of service for GPU-dependent workloads. There is no confidentiality or integrity impact — the vulnerability is limited to availability (CVSS A:H), meaning affected systems may lose access to AMD GPU functionality. Systems relying on AMD GPU acceleration (e.g., compute workloads, graphics rendering) could be disrupted until the driver is reloaded or the system is rebooted (Red Hat CVE).

The upstream Linux kernel fix is available via stable kernel commits (e.g., 2d5a6742a242, 306888b1246b, cf97eb7e47d4) that correctly initialize the p2plink attr before sysfs file creation. Users should update to a patched kernel version that includes these fixes. Red Hat has tracked this issue in Bugzilla (Bug 2425138) with priority/severity rated as low. As a workaround, systems without AMD GPUs or those not loading the amdgpu module are not affected (Red Hat Bugzilla).