Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPU_MAX_I2C_BUS so we do not overrun adev->i2c_bus[] or walk an absurd number of entries on corrupt size fields.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < b12abff6a52d96c4114d7668f790b18f9201c17caffectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 0786b38af822fcd153d565cc85be7dbd9fed4d25affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < 6db45123306c7167c6867ca3d24924bd7960d947affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < f8f0985375c3b977757fd73e2b691ff1bf1ea7b9affectedd38ceaf99ed015f2a0b9af3499791bd3a3daae21 to < a99cd231cd924b7160fecb9fb3a94b801522323baffected
Linux Linux
Default version status: affected
4.2affected0 to < 4.2unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b12abff6a52d96c4114d7668f790b18f9201c17c ↗
- https://git.kernel.org/stable/c/0786b38af822fcd153d565cc85be7dbd9fed4d25 ↗
- https://git.kernel.org/stable/c/6db45123306c7167c6867ca3d24924bd7960d947 ↗
- https://git.kernel.org/stable/c/f8f0985375c3b977757fd73e2b691ff1bf1ea7b9 ↗
- https://git.kernel.org/stable/c/a99cd231cd924b7160fecb9fb3a94b801522323b ↗