CVE-2023-54261: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54261 is a NULL pointer dereference vulnerability in the Linux kernel's drm/amdkfd subsystem, specifically affecting the GFX11 MQD (Memory Queue Descriptor) manager. The mqd_stride function, introduced in commit 2f77b9a242a2 ("drm/amdkfd: Update MQD management on multi XCC setup"), was not assigned for the GFX11 architecture, resulting in a NULL dereference triggered via debugfs. The vulnerability was published on December 30, 2025, and affects Linux kernel versions prior to the fixes landed in 6.5.4 and 6.6. The CVSS base score is not formally assigned (estimated Medium by Feedly), and the EPSS score is 0.000240 (Feedly, ENISA EUVD).

The root cause is a missing callback assignment (CWE-476: NULL Pointer Dereference) in the GFX11 MQD manager within the AMD kernel fusion driver (amdkfd). When the mqd_stride function pointer is invoked through the debugfs interface on a GFX11-based system, the uninitialized (NULL) function pointer is dereferenced, causing a kernel panic. The fix involves assigning the appropriate mqd_stride callback for GFX11 in the MQD manager initialization, mirroring the pattern used for other GPU architectures. Patches are referenced at commits 399b73d6b772 and e9dca969b242 in the stable kernel tree (Kernel Git, Kernel Git).

Successful triggering of this vulnerability causes a kernel NULL pointer dereference, resulting in a kernel panic (system crash) and denial of service on affected Linux systems running AMD GFX11 GPUs. The impact is primarily an availability concern — an attacker or unprivileged user with access to the debugfs interface could crash the host kernel. There is no known confidentiality or integrity impact, and lateral movement potential is limited to the denial-of-service effect (Feedly).

Apply the upstream Linux kernel patches that add the missing GFX11 MQD manager callbacks: commit 399b73d6b772 (for the 6.5.x stable branch, fixed in 6.5.4) and commit e9dca969b242 (for the 6.6 branch). Users running affected kernel versions on systems with AMD GFX11 GPUs should upgrade to Linux kernel 6.5.4 or 6.6 and later. As a temporary workaround, restricting access to the debugfs filesystem (e.g., mounting with nodev or limiting permissions) can reduce exposure until a patched kernel is deployed (Kernel Git, Kernel Git).