CVE-2024-42228 drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in AMD GPU Driver Vulnerabilities Two vulnerabilities in the AMD GPU driver have been reported, identified as CVE-2024-42228 and CVE-2024-56551. CVE-2024-42228 involves the use of an uninitialized value in the amdgpu_vce_cs_reloc function, while CVE-2024-56551 addresses a slab usage after free issue. Both vulnerabilities affect systems utilizing the AMD GPU driver. 14 sources 39