Linux Kernel Integer Overflow Vulnerability in AMD CDNA Acceleration Driver

An integer overflow vulnerability has been identified in the Linux kernel's AMD CDNA acceleration driver, specifically within the 'aie2_query_ctx_status_array' function. This vulnerability arises from a potential user-controlled size overflow, which, while not expected to cause immediate harm, necessitates the implementation of stricter input validation. The issue has been addressed by introducing conditions to ensure that the 'element_size' does not exceed 4KB and the 'num_element' is limited to 1KB.

Impact

Exploitation of this vulnerability could lead to a user-controlled integer overflow, potentially allowing for memory corruption or other unintended behavior.