Linux Kernel Block Sequence Buffer Overflow Vulnerability in AMD Display Driver

A buffer overflow vulnerability has been identified in the Linux kernel's AMD display driver. This issue arises in the hardware state machine sequence building process, where it's possible to generate more than 50 steps for a 6-pipe ASIC with all pipes in one MPC chain. The overflow corrupts the block_sequence_steps, leading to a crash. The vulnerability has been addressed by increasing the block_sequence array size from 50 to 100 items, which is sufficient to accommodate the upper bound of possible steps for a 6-pipe ASIC.

Impact

Exploitation of this vulnerability leads to a buffer overflow, causing a crash by corrupting the block_sequence_steps.