Описание
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Validate TA binary size
Add TA binary size validation to avoid OOB write.
(cherry picked from commit c0a04e3570d72aaf090962156ad085e37c62e442)
A flaw was found in the Linux kernel's AMD GPU driver. A local user with administrative privileges could trigger this flaw by loading a specially crafted Trusted Application (TA) binary that lacks proper size validation. This vulnerability can lead to an out-of-bounds write, potentially resulting in kernel memory corruption or a Denial of Service (DoS) through a system crash.
Отчет
This vulnerability is rated Moderate for Red Hat Enterprise Linux rather than Important because exploitation requires local access, AMD GPU hardware, and elevated administrative privileges to supply malicious Trusted Application binaries. In typical enterprise and cloud deployments lacking physical AMD graphics adapters, the vulnerable code paths are never initialized. While an out-of-bounds write could potentially lead to kernel memory corruption or a system crash, the prerequisite for privileged access substantially confines the blast radius.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Will not fix | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Will not fix | ||
| Red Hat Enterprise Linux 9 | kernel | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
6.7 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validate TA binary size Add TA binary size validation to avoid OOB write. (cherry picked from commit c0a04e3570d72aaf090962156ad085e37c62e442)
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validate TA binary size Add TA binary size validation to avoid OOB write. (cherry picked from commit c0a04e3570d72aaf090962156ad085e37c62e442)
In the Linux kernel, the following vulnerability has been resolved: d ...
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validate TA binary size Add TA binary size validation to avoid OOB write. (cherry picked from commit c0a04e3570d72aaf090962156ad085e37c62e442)
EPSS
6.7 Medium
CVSS3