The patch corrects an oversight in the Direct Rendering Manager’s AMD GPU driver where the private buffer used for the Protected Storage Processor (PSP) firmware was copied via raw memcpy calls without length checks. By changing the helper to return errors when the firmware size is zero, exceeds one megabyte, or when device entry fails, the code prevents potential buffer overflows that could overwrite kernel memory (CWE-120). This mitigates an attack scenario where a malformed firmware image could trigger an overflow, leading to arbitrary kernel execution.

All systems running Linux kernel configurations that include the AMDGPU DRM driver are affected. The vulnerability applies to any kernel version that implements the old memcpy-based copy routine before the patch, regardless of distribution. The specific affected products are the Linux kernel itself; no vendor or product name is different from the base kernel.

The CVSS score is 7.0, the EPSS score is <1%, and the vulnerability is not listed in CISA’s KEV catalog. The flaw resides in a privileged kernel module, so exploitation would require local or remote code that can invoke the driver, typically through a privilege escalation or malicious driver upload scenario. Given the medium‑high severity and potential for kernel memory corruption, exploitation would lead to high impact if successful.