CVE-2023-54150

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds error exists in the BIOS parser within the DRM/AMD driver of the Linux kernel. The issue stems from a hardcoded array size of 8 in atomfirmware.h, which can be exceeded by firmware providing a larger array. This can lead to a crash when dereferencing the larger array. A previous commit (4fc1ba4aa589) addressed some instances of this issue, but two additional cases remained unaddressed, which this update resolves.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.