Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a potential NULL pointer dereference in atom_get_src_int() when accessing WS entries. Return -ENOMEM on allocation failure to avoid the NULL dereference.

References 3

• git.kernel.org https://git.kernel.org/stable/c/35f3fb86bb0158a298d6834e7e110dcaf07f490c
• git.kernel.org https://git.kernel.org/stable/c/997e28d3d00a1d30649629515e4402612921205b
• git.kernel.org https://git.kernel.org/stable/c/cc9a8e238e42c1f43b98c097995137d644b69245

Remediation