Executive Summary

This vulnerability is a buffer overflow issue in the Linux kernel's accel/ivpu component, specifically in the MS get_info_ioctl function.

The problem occurs because the size of the information returned by the metric stream info query was not properly validated against the allocated buffer size.

If the firmware returned a size larger than the buffer, the operation would proceed incorrectly, potentially causing a buffer overflow.

The fix added a check to ensure that if the returned size exceeds the buffer size, the operation is rejected with an -EOVERFLOW error instead of copying incorrect data.

Useful 0 Not Useful 0

Impact Analysis

A buffer overflow vulnerability can lead to memory corruption, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code with kernel privileges.

Exploiting this vulnerability could compromise the security and reliability of the affected Linux system.

Useful 0 Not Useful 0