Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPU_MAX_I2C_BUS so we do not overrun adev->i2c_bus[] or walk an absurd number of entries on corrupt size fields.

Affected versions

Linux: d38ceaf99ed015f2a0b9af3499791bd3a3daae21 through before f8f0985375c3b977757fd73e2b691ff1bf1ea7b9 (git); d38ceaf99ed015f2a0b9af3499791bd3a3daae21 through before a99cd231cd924b7160fecb9fb3a94b801522323b (git); 4.2 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.