Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn code accesses the IB at predefined offsets without checking that the IB is large enough. Check the bounds here. The caller is responsible for making sure it can handle arbitrary return values. Also make the idx a uint32_t to prevent overflows causing the condition to fail.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 5da6c6430be0acb25b4242bce0323fc514d4e3cfaffectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 0fb5cb556b249b2b64c0f818136c4c3e838ef53faffectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < a853178d23e774adfe3a35073c375b04b3b20f7daffectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < fec8b11b55e53ff51a741e56894fe331a516f5c6affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 66085e206431ef88ce36f53c1f53d570790ccc9eaffected
Linux Linux
Default version status: affected
4.2affected0 to < 4.2unaffected6.1.175 to ≤ 6.1.*unaffected6.6.140 to ≤ 6.6.*unaffected6.12.90 to ≤ 6.12.*unaffected6.18.32 to ≤ 6.18.*unaffected7.0.9 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5da6c6430be0acb25b4242bce0323fc514d4e3cf ↗
- https://git.kernel.org/stable/c/0fb5cb556b249b2b64c0f818136c4c3e838ef53f ↗
- https://git.kernel.org/stable/c/a853178d23e774adfe3a35073c375b04b3b20f7d ↗
- https://git.kernel.org/stable/c/fec8b11b55e53ff51a741e56894fe331a516f5c6 ↗
- https://git.kernel.org/stable/c/ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7 ↗
- https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e ↗