An improper calculation of firmware size in the Linux kernel AMDGPU driver may lead to memory-related vulnerabilities and system-wide compromise.

The vulnerability stems from an incorrect calculation of the VCPU Buffer Object (BO) size in the drm/amdgpu/vce1 driver, where the actual firmware offset was not properly accounted for. This could result in memory corruption or out-of-bounds access when the driver interacts with the firmware.

This vulnerability carries a CVSS score of 8.8, reflecting its potential for a high impact on confidentiality, integrity, and availability. A local attacker could leverage this memory corruption to gain unauthorized access to kernel memory, potentially leading to a system crash or privilege escalation, which severely threatens the security posture of the affected infrastructure.

Immediate Action: Update the Linux kernel to version 7.0.11 or any version 7.1 and later, which contains the necessary fixes for the VCE 1 firmware size calculation.

Proactive Monitoring: Monitor system logs for kernel oops or memory-related errors associated with the amdgpu driver.

Compensating Controls: Ensure that systems are running with hardened kernel configurations and that untrusted users are restricted from accessing graphics-related device drivers.

Public Exploit Available: Unknown.

Given the high CVSS severity, organizations should prioritize updating the Linux kernel on all systems utilizing AMD graphics hardware. Apply the patches provided by your distribution vendor as soon as they become available to mitigate the risk of memory corruption attacks.