In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check bounds on allocate doorbell

allocated doorbell has an option to set the doorbell id to a specific value (used by CRIU). This value was not bounds checked.

Check to confirm it's less than KFD MAX NUM OF QUEUES PER PROCESS.