Threats tagged 'ghsa-qvg3-fh9p-wjpx'

A vulnerability in the Linux kernel's drm/amdkfd component allows out-of-bounds memory exposure via the get_wave_state() function. This occurs because the function trusts attacker-controlled values from GPU microcode on the CRIU-restore path, leading to an unbounded copy_to_user() operation that can leak adjacent kernel memory. The flaw is fixed by clamping the stack size and offset to prevent reading beyond allocated buffers.