In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check bounds for allocate sdma queue restore sdma id

allocate sdma queue has an option where the sdma queue id can be specified (used by CRIU). We weren't bounds-checking that value.

Confirm it's less than the maximum number of queues.