Linux Kernel Buffer Overflow Vulnerability in Radeon DRM Component

A buffer overflow vulnerability has been identified in the Linux kernel's Radeon Direct Rendering Manager (DRM) component. The issue arises in the 'ni_set_mc_special_registers()' function, where the last case label can overwrite two buffers, 'mc_reg_address[j]' and 'mc_data[j]', with an offset 'j' equal to 'SMC_NISLANDS_MC_REGISTER_ARRAY_SIZE'. This occurs because there are no checks for this value in both case labels after the last 'j++'. The vulnerability was detected using the static analysis tool Svace.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, potentially allowing for arbitrary code execution or causing a denial-of-service condition.