AMD TEE SOC Driver Insufficient Parameter Sanitization Vulnerability Allowing Out-of-Bounds Memory Access

A vulnerability exists in the Trusted Execution Environment (TEE) System-on-a-Chip (SOC) driver due to inadequate parameter validation. This flaw could enable an attacker to send a malformed command, specifically the DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART, leading to unauthorized reading or writing beyond the limits of allocated arrays. Such actions could potentially disrupt platform integrity or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in out-of-bounds memory access, causing a denial-of-service or compromising platform integrity.

Remediation

Users are advised to update to the latest version of the AMD ROCm software. For specific guidance, refer to the AMD Radeon Graphics Cards tables in the AMD Radeon Software Bulletin.