7.8

CVE-2023-53707

drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

The type of size is unsigned int, if size is 0x40000000, there will
be an integer overflow, size will be zero after size *= sizeof(uint32_t),
will cause uninitialized memory to be referenced later.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Version < 9f55d300541cb5b435984d269087810581580b00
Status affected
Version d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Version < c3deb091398e9e469d08dd1599b6d76fd6b29df8
Status affected
Version d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Version < 87c2213e85bd81e4a9a4d0880c256568794ae388
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.2
Status affected
Version 0
Version < 4.2
Status unaffected
Version <= 6.1.*
Version 6.1.47
Status unaffected
Version <= 6.4.*
Version 6.4.12
Status unaffected
Version <= *
Version 6.5
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.048
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/9f55d300541cb5b435984d269087810581580b00
https://git.kernel.org/stable/c/c3deb091398e9e469d08dd1599b6d76fd6b29df8
https://git.kernel.org/stable/c/87c2213e85bd81e4a9a4d0880c256568794ae388