In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSizeInRequests is zero, UBSAN reports the following warning because dml_log2 returns an unexpected negative value: shift exponent 4294966273 is too large for 32-bit type 'int' [HOW] In the case PTEBufferSizeInRequests is zero, skip the dml_log2() and assign the result directly.
2025-05-02T16:15:26.720
2025-11-12T20:49:36.693
Analyzed
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSSv3.1: 7.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | linux | linux_kernel | < 5.10.176 | Yes |
| Operating System | linux | linux_kernel | < 5.15.104 | Yes |
| Operating System | linux | linux_kernel | < 6.1.21 | Yes |
| Operating System | linux | linux_kernel | < 6.2.8 | Yes |