Linux Kernel Out-of-Bounds Write Vulnerability in AMD DNA Acceleration

A vulnerability in the Linux kernel's handling of command slots for AMD DNA acceleration can lead to an out-of-bounds write and memory corruption. This issue arises because the remaining space in a command slot may be smaller than the command header size. The vulnerability has been addressed by modifying the order of operations: the command header is now cleared after verifying the available slot space, rather than before, which prevents the out-of-bounds write.

Impact

Exploitation of this vulnerability could lead to memory corruption, potentially allowing for arbitrary code execution or causing a denial-of-service condition.