CVE-2023-52691

drm/amd/pm: fix a double-free in si_dpm_init

State: Published
Severity: 7.8 High
Published: May 17, 2024
Updated: Aug 5, 2026
Reserved: Mar 7, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fix a double-free in si_dpm_init

When the allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free some fields of adev. However, when the control flow returns to si_dpm_sw_init, it goes to label dpm_failed and calls si_dpm_fini, which calls amdgpu_free_extended_power_table again and free those fields again. Thus a double-free is triggered.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	841686df9f7d2942cfd94d024b8591fa3f74ef7c to before afe9f5b871f86d58ecdc45b217b662227d7890d0Affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c to before 06d95c99d5a4f5accdb79464076efe62e668c706Affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c to before aeed2b4e4a70c7568d4a5eecd6a109713c0dfbf4Affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c to before 2bf47c89bbaca2bae16581ef1b28aaec0ade0334Affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c to before f957a1be647f7fc65926cbf572992ec2747a93f2Affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c to before fb1936cb587262cd539e84b34541abb06e42b2f9Affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c to before ca8e2e251c65e5a712f6025e27bd9b26d16e6f4aAffected 841686df9f7d2942cfd94d024b8591fa3f74ef7c to before ac16667237a82e2597e329eb9bc520d1cf9dff30Affected
LinuxLinux	4.9Affected before 4.9Not affected 4.19.306 through 4.19.Not affected 5.4.268 through 5.4.Not affected 5.10.209 through 5.10.Not affected 5.15.148 through 5.15.Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

841686df9f7d2942cfd94d024b8591fa3f74ef7c to before afe9f5b871f86d58ecdc45b217b662227d7890d0Affected
841686df9f7d2942cfd94d024b8591fa3f74ef7c to before 06d95c99d5a4f5accdb79464076efe62e668c706Affected
841686df9f7d2942cfd94d024b8591fa3f74ef7c to before aeed2b4e4a70c7568d4a5eecd6a109713c0dfbf4Affected
841686df9f7d2942cfd94d024b8591fa3f74ef7c to before 2bf47c89bbaca2bae16581ef1b28aaec0ade0334Affected
841686df9f7d2942cfd94d024b8591fa3f74ef7c to before f957a1be647f7fc65926cbf572992ec2747a93f2Affected
841686df9f7d2942cfd94d024b8591fa3f74ef7c to before fb1936cb587262cd539e84b34541abb06e42b2f9Affected
841686df9f7d2942cfd94d024b8591fa3f74ef7c to before ca8e2e251c65e5a712f6025e27bd9b26d16e6f4aAffected
841686df9f7d2942cfd94d024b8591fa3f74ef7c to before ac16667237a82e2597e329eb9bc520d1cf9dff30Affected

LinuxLinux

4.9Affected
before 4.9Not affected
4.19.306 through 4.19.*Not affected
5.4.268 through 5.4.*Not affected
5.10.209 through 5.10.*Not affected
5.15.148 through 5.15.*Not affected
6.1.75 through 6.1.*Not affected
6.6.14 through 6.6.*Not affected
6.7.2 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.