Описание
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix ucode out-of-bounds read warning
Clear warning that read ucode[] may out-of-bounds.
A flaw was found in the Linux kernel's amdgpu graphics driver. This issue involves an out-of-bounds read when handling microcode (ucode) that was identified as a warning. While not a direct security vulnerability on its own, this flaw could potentially be leveraged by a local attacker with low privileges to trigger further issues that might lead to information disclosure or a denial of service.
Меры по смягчению последствий
To mitigate this issue, prevent the amdgpu kernel module from loading. This can be achieved by creating a modprobe configuration file. Note that this may impact graphics functionality if an AMD GPU is in use. A system reboot is required for the changes to take effect.
Create a file named /etc/modprobe.d/blacklist-amdgpu.conf with the following content:
Then, regenerate the initramfs and reboot the system:
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | ||
| Red Hat Enterprise Linux 8 | kernel | Will not fix | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Will not fix | ||
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
Показывать по
Дополнительная информация
Статус:
7.1 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ucode out-of-bounds read warning Clear warning that read ucode[] may out-of-bounds.
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ucode out-of-bounds read warning Clear warning that read ucode[] may out-of-bounds.
In the Linux kernel, the following vulnerability has been resolved: d ...
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ucode out-of-bounds read warning Clear warning that read ucode[] may out-of-bounds.
7.1 High
CVSS3