CVE-2023-52461

If we're given a malformed entity in drm_sched_entity_init()--shouldn't happen, but we verify--with out-of-bounds priority value, we set it to an allowed value. Fix the expression which sets this limit.

This vulnerability is rated as Low severity because triggering this internal DRM GPU scheduler bounds verification flaw requires local access with specific driver interactions and presents minimal risk to overall system integrity. In addition, standard enterprise deployments such as Red Hat Enterprise Linux 8 and 9 do not contain the upstream commit that introduced this flaw and are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

No mitigation is currently available for this vulnerability. Make sure to perform the updates as they become available.