In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Prevent ubuf size overflow
The ubuf size calculation may overflow, resulting in an undersized
allocation and possible memory corruption.
Use check_add_overflow() helpers to validate the size calculation before
allocation.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
References 3
https://git.kernel.org/stable/c/03808abb1d868aed7478a11a82e5bb4b3f1ca6d6
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1500b31db94374a6669e73ce94d6f71cf8e85e06
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/972bf4a23478fcb247b4f507d47a584bc8aea5bd
416baaa9-dc9f-4396-8d5f-8c081fb06d67