Technical Summary

The Linux kernel's drm/amdgpu subsystem contained a vulnerability where the uvd/vce/vcn code accessed the indirect buffer (IB) at fixed offsets without verifying that the IB was sufficiently large. This lack of bounds checking could lead to out-of-bounds memory access. The vulnerability was addressed by adding explicit bounds checks in the ib_{get,set}_value functions and by changing the index variable to a 32-bit unsigned integer to prevent overflow conditions that could bypass these checks. This fix prevents potential memory corruption or denial of service caused by improper IB access.