CVE-2024-44977

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Validate TA binary size

Add TA binary size validation to avoid OOB write.

(cherry picked from commit c0a04e3570d72aaf090962156ad085e37c62e442)

This vulnerability is rated Moderate for Red Hat Enterprise Linux rather than Important because exploitation requires local access, AMD GPU hardware, and elevated administrative privileges to supply malicious Trusted Application binaries. In typical enterprise and cloud deployments lacking physical AMD graphics adapters, the vulnerable code paths are never initialized. While an out-of-bounds write could potentially lead to kernel memory corruption or a system crash, the prerequisite for privileged access substantially confines the blast radius.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.