ACK: [SRU][F/J/M/N][PATCH 0/1] CVE-2024-26922

[Tim Gardner]

On 5/21/24 1:59 PM, Yuxuan Luo wrote:
> [Impact]
> A potential out-of-bound read vulnerability is found in AMD GPU drm code
> due to lack of boundary check, which can lead to crash in the system.
> 
> [Backport]
> It is a clean cherry pick for J/M/N.
> 
> For focal, there is a context conflict due to missing
> 9f0bcf49e9895cb005d78b33a5eebfa11711b425 (“amdgpu: validate offset_in_bo
> of drm_amdgpu_gem_va”). Since this prerequisite commit is trying to
> achieve the same thing and the modified chunk was removed, we can ignore
> this prerequisite commit and apply the fix.
> 
> [Test]
> Compile and boot tested.
> 
> [Where things could go wrong]
> Regression might occur to users using AMD GPUs.
> 
> xinhui pan (1):
>    drm/amdgpu: validate the parameters of bo mapping operations more
>      clearly
> 
>   drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 72 ++++++++++++++++----------
>   1 file changed, 46 insertions(+), 26 deletions(-)
> 
Acked-by: Tim Gardner <tim.gardner at canonical.com>
-- 
-----------
Tim Gardner
Canonical, Inc