CVE-2023-52818

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52818
In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexible array sizes, use flexible arrays.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 Patch
https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 Patch
https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 Patch
https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 Patch
https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 Patch
https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f Patch
https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 Patch
https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 Patch
https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b Patch
https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 Patch
https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 Patch
https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 Patch
https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 Patch
https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 Patch
https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f Patch
https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 Patch
https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 Patch
https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

30 Dec 2024, 20:08

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 - () https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 - Patch
References () https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 - () https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 - Patch
References () https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 - () https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 - Patch
References () https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 - () https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 - Patch
References () https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 - () https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 - Patch
References () https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f - () https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f - Patch
References () https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 - () https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 - Patch
References () https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 - () https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 - Patch
References () https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b - () https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-129
First Time Linux linux Kernel
Linux

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 - () https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 -
References () https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 - () https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 -
References () https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 - () https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 -
References () https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 - () https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 -
References () https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 - () https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 -
References () https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f - () https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f -
References () https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 - () https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 -
References () https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 - () https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 -
References () https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b - () https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/amd: corrige el índice de matriz UBSAN fuera de límites para SMU7. Para estructuras pptable que usan tamaños de matriz flexibles, use matrices flexibles.

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2024-12-30 20:08

NVD link : CVE-2023-52818

Mitre link : CVE-2023-52818

CVE.ORG link : CVE-2023-52818

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index