CVE-2021-4460

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix UBSAN shift-out-of-bounds warning

If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up doing a shift operation where the number of bits shifted equals number of bits in the operand. This behaviour is undefined.

Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the count is >= number of bits in the operand.

Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4a488a7ad71401169cecee75dc94bcce642e2c53 < 0c0356ef2498c1a250fe3846f30293f828737309affected
LinuxLinux4a488a7ad71401169cecee75dc94bcce642e2c53 < 1874b0ef1426b873de94c61861e38f29a8df714caffected
LinuxLinux4a488a7ad71401169cecee75dc94bcce642e2c53 < 3fdc5182700910a685d23df57d65166e8556a266affected
LinuxLinux4a488a7ad71401169cecee75dc94bcce642e2c53 < 9069b1b542de8f3bbffef868aff41521b21485cfaffected
LinuxLinux4a488a7ad71401169cecee75dc94bcce642e2c53 < 50e2fc36e72d4ad672032ebf646cecb48656efe0affected
LinuxLinux3.19affected
LinuxLinux0 < 3.19unaffected
LinuxLinux5.4.118 <= 5.4.*unaffected
LinuxLinux5.10.36 <= 5.10.*unaffected
LinuxLinux5.11.20 <= 5.11.*unaffected
LinuxLinux5.12.3 <= 5.12.*unaffected
LinuxLinux5.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References