Linux Kernel EDAC/i10nm Vulnerability on Intel Granite Rapids Servers

A vulnerability in the Linux kernel's EDAC/i10nm driver can lead to a shift-out-of-bounds error when loading the driver on some Intel Granite Rapids servers. This issue arises because certain BIOS versions may disable a memory controller if no DIMMs are populated, leaving the DIMMMTR register with an invalid value. As a result, the driver encounters a call trace error. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability causes a shift-out-of-bounds error, which can lead to undefined behavior, including potential memory corruption.

Reproduction

To reproduce this vulnerability, load the i10nm_edac driver on an affected Intel Granite Rapids server with a BIOS version that disables a memory controller due to the absence of populated DIMMs. This will trigger the shift-out-of-bounds error in the call trace.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version to apply the fix.