The Linux kernel AMDGPU driver contained a vulnerability where the user-supplied num_entries parameter was used directly in a kvcalloc call without an upper bounds check. Because num_entries is a 32-bit unsigned integer and the allocation size could exceed INT_MAX, this could trigger a kernel warning and panic on systems configured with CONFIG_PANIC_ON_WARN=y. The fix involved adding a size bounds check before the allocation to reject excessively large num_entries values with an error code (-EINVAL).

Exploitation of this vulnerability could cause a kernel warning and potentially a kernel panic on affected systems, leading to denial of service. There is no indication of code execution or privilege escalation. Systems with CONFIG_PANIC_ON_WARN=y are particularly affected as they will panic on the warning triggered by the oversized allocation.

A fix has been applied in the Linux kernel source by adding a size bounds check on num_entries before allocation. Users should update their Linux kernel to a version that includes this fix. Since this is a kernel vulnerability, patching the kernel is the recommended mitigation. No other specific mitigations are indicated.