REDHAT-BUG-2303077: Medium severity red hat kernel-devel vulnerability
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Using uninitialized value size when calling amdgpuvcecsreloc
Initialize the size before calling amdgpuvcecsreloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian)
Affected Software
Event History
Frequently Asked Questions
What conditions are needed to trigger this issue?
The issue is in the AMDGPU VCE command-submission relocation path, where an uninitialized size value can be passed to amdgpu_vce_cs_reloc. Triggering it would require reaching that path with a command case such as 0x03000001.
How can I determine whether a fix is available for my Red Hat system?
The provided references identify Red Hat advisories RHSA-2024:7000, RHSA-2024:7001, and RHSA-2024:9315. Check whether the kernel update supplied by the advisory applicable to your system has been installed.