The vulnerability in the Linux kernel's drm/amd/display component involved improper validation of the GPIO pin LUT table size derived from the VBIOS table_header.structuresize field. The functions get_gpio_i2c_info() and bios_parser_get_gpio_pin_info() used this size to iterate over gpio_pin[] entries without confirming the entire claimed structure was within the BIOS image. This could cause an out-of-bounds read if the VBIOS reported a structuresize larger than the actual mapped data. The issue was fixed by adding a call to bios_get_image() to validate the full structuresize is accessible before iteration, preventing out-of-bounds memory access.

The vulnerability allows an out-of-bounds read in the Linux kernel when parsing the GPIO pin LUT table from the VBIOS. This could potentially lead to information disclosure or kernel instability. No known exploits in the wild have been reported. The impact is limited to the Linux kernel's AMD display driver handling of VBIOS data.

A fix has been applied in the Linux kernel to validate the full GPIO pin LUT table size before iterating, preventing out-of-bounds reads. Users should update to the Linux kernel version containing this fix. Since this is not a cloud service, remediation depends on applying the official kernel update. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the exact fixed versions and update accordingly.