In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
[WHY] When PTEBufferSizeInRequests is zero, UBSAN reports the following warning because dml_log2 returns an unexpected negative value:
shift exponent 4294966273 is too large for 32-bit type 'int'
[HOW]
In the case PTEBufferSizeInRequests is zero, skip the dml_log2() and assign the result directly.
[
{
"signature_type": "Function",
"digest": {
"function_hash": "336265293963136907649657094853529623853",
"length": 4305.0
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c",
"function": "CalculateVMAndRowBytes"
},
"signature_version": "v1",
"id": "CVE-2023-53077-1cd921fe",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7257070be70e19a9138f39009c1a26c83a8a7cfa"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336265293963136907649657094853529623853",
"length": 4305.0
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c",
"function": "CalculateVMAndRowBytes"
},
"signature_version": "v1",
"id": "CVE-2023-53077-394f3d30",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@031f196d1b1b6d5dfcb0533b431e3ab1750e6189"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76050227283625593098372690235762270544",
"268605440379916791634562441768025679985",
"276539828871763941023693460860410900658",
"107489765224961187049827199111540107393"
]
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c"
},
"signature_version": "v1",
"id": "CVE-2023-53077-485533ea",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7257070be70e19a9138f39009c1a26c83a8a7cfa"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336265293963136907649657094853529623853",
"length": 4305.0
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c",
"function": "CalculateVMAndRowBytes"
},
"signature_version": "v1",
"id": "CVE-2023-53077-4abcfca3",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e12b95680821b9880cd9992c0f3555389363604f"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76050227283625593098372690235762270544",
"268605440379916791634562441768025679985",
"276539828871763941023693460860410900658",
"107489765224961187049827199111540107393"
]
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c"
},
"signature_version": "v1",
"id": "CVE-2023-53077-4ecc3e70",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bec1bea2fa974e63f6059c33edde669c7894d0bc"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336265293963136907649657094853529623853",
"length": 4305.0
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c",
"function": "CalculateVMAndRowBytes"
},
"signature_version": "v1",
"id": "CVE-2023-53077-7a176b49",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bec1bea2fa974e63f6059c33edde669c7894d0bc"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76050227283625593098372690235762270544",
"268605440379916791634562441768025679985",
"276539828871763941023693460860410900658",
"107489765224961187049827199111540107393"
]
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c"
},
"signature_version": "v1",
"id": "CVE-2023-53077-94267ccb",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@031f196d1b1b6d5dfcb0533b431e3ab1750e6189"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "336265293963136907649657094853529623853",
"length": 4305.0
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c",
"function": "CalculateVMAndRowBytes"
},
"signature_version": "v1",
"id": "CVE-2023-53077-ac09cc99",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a16394b5d661afec9a264fecac3abd87aea439ea"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76050227283625593098372690235762270544",
"268605440379916791634562441768025679985",
"276539828871763941023693460860410900658",
"107489765224961187049827199111540107393"
]
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c"
},
"signature_version": "v1",
"id": "CVE-2023-53077-eef2ceab",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a16394b5d661afec9a264fecac3abd87aea439ea"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76050227283625593098372690235762270544",
"268605440379916791634562441768025679985",
"276539828871763941023693460860410900658",
"107489765224961187049827199111540107393"
]
},
"target": {
"file": "drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c"
},
"signature_version": "v1",
"id": "CVE-2023-53077-f2406c6d",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e12b95680821b9880cd9992c0f3555389363604f"
}
]