Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger get_queue_ids() computes array_size = num_queues * sizeof(uint32_t), which could overflow on 32-bit size_t build. using array_size() instead, it saturates to SIZE_MAX on overflow. (cherry picked from commit 2d57a0475f085c08b49312dfd8edcb461845f285)
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a70a93fa568b4f05aba548dadb673703eccf5480 to < 4e5f808b454167cc58d7084a407a554d8ddc694daffecteda70a93fa568b4f05aba548dadb673703eccf5480 to < de70a80992396ee306ee3a2810ad28aa1608ba9baffecteda70a93fa568b4f05aba548dadb673703eccf5480 to < 5cf4a41aa0d74e4c83f82d2ce233b5189ed4b43caffecteda70a93fa568b4f05aba548dadb673703eccf5480 to < 4f9eeedc3d3151f8a226fd676c314a813edda5a1affecteda70a93fa568b4f05aba548dadb673703eccf5480 to < 93f5534b35a05ef8a0109c1eefa800062fee810aaffected
Linux Linux
Default version status: affected
6.5affected0 to < 6.5unaffected6.6.143 to ≤ 6.6.*unaffected6.12.93 to ≤ 6.12.*unaffected6.18.35 to ≤ 6.18.*unaffected7.0.12 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4e5f808b454167cc58d7084a407a554d8ddc694d ↗
- https://git.kernel.org/stable/c/de70a80992396ee306ee3a2810ad28aa1608ba9b ↗
- https://git.kernel.org/stable/c/5cf4a41aa0d74e4c83f82d2ce233b5189ed4b43c ↗
- https://git.kernel.org/stable/c/4f9eeedc3d3151f8a226fd676c314a813edda5a1 ↗
- https://git.kernel.org/stable/c/93f5534b35a05ef8a0109c1eefa800062fee810a ↗