Threats tagged 'ghsa-qq85-p63r-6hwh'

A vulnerability in the Linux kernel's amdkfd driver allowed user space to control the buffer size for the AMDKFD_IOC_GET_DMABUF_INFO ioctl call. This could enable a malicious user to request an excessively large buffer (e.g., 2 GiB), potentially causing an out-of-memory condition in kernel context. The issue was fixed by changing the driver to determine the buffer size internally and only allocate the appropriate amount, preventing user-controlled large allocations.