Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read Reject voltage objects whose usSize is smaller than the header or would advance the cursor past the table end, preventing an infinite loop or heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c82baa28184356a75c0157129f88af42b2e7b695 before 574af7c61f2bed37baa3b60669e428d24d2c9ae8; affected c82baa28184356a75c0157129f88af42b2e7b695 before 203ffe648948ca3c2f55b21118945a7a6d0884aa; affected c82baa28184356a75c0157129f88af42b2e7b695 before 0a6c9b3801903b6db91f3cbf148646b501dbded3; affected c82baa28184356a75c0157129f88af42b2e7b695 before 83c680de6d41d627c077dedb24f89d9e5be0e2a2; affected c82baa28184356a75c0157129f88af42b2e7b695 before 5d3cc8e388464f485d0944b87b8f9426e637d082 |
| Linux / Linux | affected 4.5; unaffected 0 before 4.5; unaffected 6.6.160 through 6.6.*; unaffected 6.12.113 through 6.12.*; unaffected 6.18.56 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/574af7c61f2bed37baa3b60669e428d24d2c9ae8
- https://git.kernel.org/stable/c/203ffe648948ca3c2f55b21118945a7a6d0884aa
- https://git.kernel.org/stable/c/0a6c9b3801903b6db91f3cbf148646b501dbded3
- https://git.kernel.org/stable/c/83c680de6d41d627c077dedb24f89d9e5be0e2a2
- https://git.kernel.org/stable/c/5d3cc8e388464f485d0944b87b8f9426e637d082