The Linux kernel's drm/amd/display subsystem contained a vulnerability in the dal_vector_reserve() function where allocation size was computed using uint32_t multiplication without overflow checks. This could cause silent integer overflow, resulting in krealloc allocating a smaller buffer than intended. Subsequent operations could then cause heap overflows. The vulnerability was fixed by replacing krealloc() with krealloc_array(), which performs an internal overflow check and returns NULL if an overflow occurs, thus preventing heap overflows.

Successful exploitation of this vulnerability could lead to heap overflows, potentially allowing an attacker with local access and low privileges to cause memory corruption. The CVSS vector indicates high impact on confidentiality, integrity, and availability, but requires local attack vector with high attack complexity and low privileges. There is no indication of known exploits in the wild.

A fix is available and has been applied in the Linux kernel by replacing krealloc() with krealloc_array() in the affected function. Users should update their Linux kernel to a version that includes this fix. Since this is not a cloud service, remediation depends on applying the updated kernel version. Patch status is not explicitly confirmed in the provided data; users should verify with the official Linux kernel advisories for the exact fixed versions.