[SRU][F/J/M/N][PATCH 0/1] CVE-2024-26922

Yuxuan Luo yuxuan.luo at canonical.com
Tue May 21 19:59:57 UTC 2024


[Impact]
A potential out-of-bound read vulnerability is found in AMD GPU drm code
due to lack of boundary check, which can lead to crash in the system.

[Backport]
It is a clean cherry pick for J/M/N.

For focal, there is a context conflict due to missing
9f0bcf49e9895cb005d78b33a5eebfa11711b425 (“amdgpu: validate offset_in_bo
of drm_amdgpu_gem_va”). Since this prerequisite commit is trying to
achieve the same thing and the modified chunk was removed, we can ignore
this prerequisite commit and apply the fix.

[Test]
Compile and boot tested.

[Where things could go wrong]
Regression might occur to users using AMD GPUs.

xinhui pan (1):
  drm/amdgpu: validate the parameters of bo mapping operations more
    clearly

 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 72 ++++++++++++++++----------
 1 file changed, 46 insertions(+), 26 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list