Linux Kernel Out-of-Bounds Access Vulnerability in Intel Graphics Driver

A vulnerability allowing array-index-out-of-bounds access has been identified in the Linux kernel's Intel graphics driver for Gen 11 hardware. This issue arises from a mismatch in the expected and actual number of sub-slices, potentially leading to memory corruption. The vulnerability was reported by the Undefined Behavior Sanitizer (UBSAN) while the system was running Ubuntu 6.2.0-9-generic.

Impact

Exploitation of this vulnerability could lead to memory corruption, with potential consequences such as arbitrary code execution or causing a system crash.

Reproduction

The vulnerability can be reproduced on a laptop with a Gen 11 Intel graphics card running Ubuntu 6.2.0-9-generic. The issue manifests as an array-index-out-of-bounds error in the Intel graphics driver's sub-slice management, specifically in the 'intel_sseu.c' file.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.