Linux Kernel AMDGPU User Queue Size Validation Vulnerability

A vulnerability in the Linux kernel's AMDGPU driver has been addressed, focusing on the validation of user queue sizes to ensure they comply with hardware requirements. The vulnerability could lead to GPU faults or unexpected behavior. The issue was resolved by adding checks to ensure that queue sizes are a power of two, allowing for efficient ring buffer management, and are no smaller than the AMDGPU_GPU_PAGE_SIZE, preventing inadequate memory allocations.

Impact

The lack of proper validation could have allowed users to configure queue sizes that led to GPU faults or other unexpected behaviors.

Reproduction

The vulnerability could be reproduced by attempting to set a user queue size that does not meet the specified hardware requirements, such as a size that is not a power of two or smaller than the AMDGPU_GPU_PAGE_SIZE.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the official Linux kernel website.