In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()
Fix two issues with memory allocation in amdgpu_discovery_get_nps_info() for mem_ranges:
- Add a check for allocation failure to avoid dereferencing a null pointer.
- As suggested by Christophe, use kvcalloc() for memory allocation, which checks for multiplication overflow.
Additionally, assign the output parameters nps_type and range_cnt after the kvcalloc() call to prevent modifying the output parameters in case of an error return.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1010-lowlatency-64k | Feb 20, 2025 | Dec 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub