Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 The type of size is unsigned int, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 8fb035232b505ab12119adf78f5fc1f93f2b7e24affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 6e03634f44cd5988ee5b6cdd4f849e73762095e7affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 9f55d300541cb5b435984d269087810581580b00affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < c3deb091398e9e469d08dd1599b6d76fd6b29df8affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 87c2213e85bd81e4a9a4d0880c256568794ae388affected
Linux Linux
Default version status: affected
4.2affected0 to < 4.2unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.47 to ≤ 6.1.*unaffected6.4.12 to ≤ 6.4.*unaffected6.5 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/8fb035232b505ab12119adf78f5fc1f93f2b7e24 ↗
- https://git.kernel.org/stable/c/6e03634f44cd5988ee5b6cdd4f849e73762095e7 ↗
- https://git.kernel.org/stable/c/9f55d300541cb5b435984d269087810581580b00 ↗
- https://git.kernel.org/stable/c/c3deb091398e9e469d08dd1599b6d76fd6b29df8 ↗
- https://git.kernel.org/stable/c/87c2213e85bd81e4a9a4d0880c256568794ae388 ↗