Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with fru_pia_advance() and fru_pia_copy_field() helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on truncated or malformed FRU data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 0dbf2c56262532fbd498f590c91c4085413b8829 before 567d7c3f93f8d6bdc946a557a160ee1c42cfae91; affected 0dbf2c56262532fbd498f590c91c4085413b8829 before 813311512505e95e4e3c898ff94b11886a15e494; affected 0dbf2c56262532fbd498f590c91c4085413b8829 before 4396d74b0c7304946ee343a6611ac6dbc0bfbf78; affected 0dbf2c56262532fbd498f590c91c4085413b8829 before c990c05eb6c74c98d1ff3acf67a19015312820b7 |
| Linux / Linux | affected 6.2; unaffected 0 before 6.2; unaffected 6.6.160 through 6.6.*; unaffected 6.12.111 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.