CVE-2023-53707

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

The type of size is unsigned int, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later.

This flaw presents a low operational risk to Red Hat environments because exploitation requires local access on systems physically equipped with AMD graphics hardware utilizing the amdgpu driver. In standard enterprise server installations, dedicated GPU devices are seldom present and direct access to rendering interfaces is restricted to privileged users. Additionally, supported Red Hat Enterprise Linux releases are not affected as the vulnerable code sequence is not present in their kernel builds.