What happened
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with fru_pia_advance() and fru_pia_copy_field() helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on truncated or malformed FRU data.
Affected versions
Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 813311512505e95e4e3c898ff94b11886a15e494 (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 4396d74b0c7304946ee343a6611ac6dbc0bfbf78 (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before c990c05eb6c74c98d1ff3acf67a19015312820b7 (git); before 6.12.111 (semver); before 6.18.53 (semver) Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.