Threats Tagged 'ghsa-q3hq-vwmg-m826'

A vulnerability in the Linux kernel's drm/amdgpu/vce1 subsystem related to incorrect calculation of firmware size and offsets has been resolved. The issue involved the VCPU buffer object (BO) not properly accounting for firmware offset, potentially leading to out-of-bounds access. The fix ensures correct size calculation and alignment to the 32K TLB size. This vulnerability is addressed in multiple Linux kernel versions with patches available. The CVSS score is 8.8, indicating a high severity vulnerability with potential for privilege escalation and system compromise.