Linux Kernel Out-of-Bounds Read Vulnerability in AMD GPU VCN4 Processing

A vulnerability allowing out-of-bounds reads has been addressed in the Linux kernel's AMDGPU video coding engine version 4.0. This issue arose during the parsing of instruction buffers, where improper bounds checks could lead to reading data outside the intended limits. The vulnerability has been mitigated by rewriting the instruction buffer parsing to utilize a function that properly handles bounds verification.

Impact

Exploitation of this vulnerability could lead to out-of-bounds read conditions, potentially allowing for unauthorized memory access or information leakage.

Reproduction

The vulnerability can be reproduced by parsing instruction buffers in the AMDGPU VCN4 engine without proper bounds checks, leading to out-of-bounds read conditions.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit containing the fix is available in the Linux kernel stable tree.