In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Adjust VSDB parser for replay feature
At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN:
[ 27.804016] BUG: KASAN: slab-out-of-bounds in amdgpu_dm_update_freesync_caps+0xefa/0x17a0 [amdgpu] [ 27.804788] Read of size 1 at addr ffff8881647fdb00 by task systemd-udevd/383
...
[ 27.821207] Memory state around the buggy address: [ 27.821215] ffff8881647fda00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.821224] ffff8881647fda80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.821234] >ffff8881647fdb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.821243] ^ [ 27.821250] ffff8881647fdb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.821259] ffff8881647fdc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.821268] ==================================================================
This is caused because the ID extraction happens outside of the range of the edid lenght. This commit addresses this issue by considering the amd_vsdb_block size.
(cherry picked from commit b7e381b1ccd5e778e3d9c44c669ad38439a861d8)
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 2, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-azure-fde-lts-24.04 | Feb 20, 2025 | Dec 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub