AMD Graphics Driver - crafted pointer leading to arbitrary code execution: Improper input validation in the AMD

Impact

Improper input validation in the AMD graphics driver lets an attacker supply a crafted pointer and reach arbitrary code execution. At 8.8 this is the most severe of AMD's own graphics-driver advisories in the window: a pointer that crosses the driver boundary unvalidated means kernel-level execution from whatever context can issue the call.

Who can reach it

Local, via the graphics driver interface - reachable by a process holding the GPU device.

What to do

Update the AMD graphics driver package, then reload the driver or reboot. Confirm the fixed version is present in the ROCm/amdgpu build you actually deploy, since the packaged AMD driver and the mainline kernel driver move on different schedules.

References