Threats tagged 'ghsa-636p-hq8h-v2cp'

A vulnerability in the Linux kernel's drm/amd/powerplay component related to VoltageObjectInfo has been fixed. The issue involved a zero-stride loop and out-of-bounds (OOB) read caused by malformed VoltageObjectInfo tables supplied by the VBIOS. The fix rejects voltage objects with sizes smaller than the header or that would advance the cursor beyond the table end, preventing infinite loops and heap OOB reads.