CVE-2023-54150
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix an out of bounds error in BIOS parser The array is hardcoded to 8 in atomfirmware.h, but firmware provides a bigger one sometimes. Deferencing the larger array causes an out of bounds error. commit 4fc1ba4aa589 ("drm/amd/display: fix array index out of bound error in bios parser") fixed some of this, but there are two other cases not covered by it. Fix those as well.
How to fix
- Linux Linuxb8e7589f50b709b647b642531599e70707faf70c, 66acfe798cd08b36cfbb65a30fab3159811304a7, 5675ecd2e0b00a4318ba1db1a1234e7d45b13d6b, dea2dbec716c38a0b73b6ad01d91e2b120cc5f1e, d116db180decec1b21bba31d2ff495ac4d8e1b83 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | ae79c310b1a6f97429a5784b65f125d9cc9c95b1 ≤ v < b8e7589f50b709b647b642531599e70707faf70c, ae79c310b1a6f97429a5784b65f125d9cc9c95b1 ≤ v < 66acfe798cd08b36cfbb65a30fab3159811304a7, ae79c310b1a6f97429a5784b65f125d9cc9c95b1 ≤ v < 5675ecd2e0b00a4318ba1db1a1234e7d45b13d6b, ae79c310b1a6f97429a5784b65f125d9cc9c95b1 ≤ v < dea2dbec716c38a0b73b6ad01d91e2b120cc5f1e, ae79c310b1a6f97429a5784b65f125d9cc9c95b1 ≤ v < d116db180decec1b21bba31d2ff495ac4d8e1b83, 4.15 | b8e7589f50b709b647b642531599e70707faf70c, 66acfe798cd08b36cfbb65a30fab3159811304a7, 5675ecd2e0b00a4318ba1db1a1234e7d45b13d6b, dea2dbec716c38a0b73b6ad01d91e2b120cc5f1e, d116db180decec1b21bba31d2ff495ac4d8e1b83 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.