CVE-2023-52819

drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga

State: Published
Severity: 6.6 Medium
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga

For pptable structs that use flexible array sizes, use flexible arrays.

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c82baa28184356a75c0157129f88af42b2e7b695 to before 60a00dfc7c5deafd1dd393beaf53224f7256dad6Affected c82baa28184356a75c0157129f88af42b2e7b695 to before a63fd579e7b1c3a9ebd6e6c494d49b1b6cf5515eAffected c82baa28184356a75c0157129f88af42b2e7b695 to before d50a56749e5afdc63491b88f5153c1aae00d4679Affected c82baa28184356a75c0157129f88af42b2e7b695 to before 8c1dbddbfcb051e82cea0c197c620f9dcdc38e92Affected c82baa28184356a75c0157129f88af42b2e7b695 to before a237675aa1e62bbfaa341c535331c8656a508fa1Affected c82baa28184356a75c0157129f88af42b2e7b695 to before d0725232da777840703f5f1e22f2e3081d712aa4Affected c82baa28184356a75c0157129f88af42b2e7b695 to before 7c68283f3166221af3df5791f0e13d3137a72216Affected c82baa28184356a75c0157129f88af42b2e7b695 to before b3b8b7c040cf069da7afe11c5bd73b870b8f3d18Affected c82baa28184356a75c0157129f88af42b2e7b695 to before 0f0e59075b5c22f1e871fbd508d6e4f495048356Affected
LinuxLinux	4.5Affected before 4.5Not affected 4.14.331 through 4.14.Not affected 4.19.300 through 4.19.Not affected 5.4.262 through 5.4.Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

c82baa28184356a75c0157129f88af42b2e7b695 to before 60a00dfc7c5deafd1dd393beaf53224f7256dad6Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before a63fd579e7b1c3a9ebd6e6c494d49b1b6cf5515eAffected
c82baa28184356a75c0157129f88af42b2e7b695 to before d50a56749e5afdc63491b88f5153c1aae00d4679Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before 8c1dbddbfcb051e82cea0c197c620f9dcdc38e92Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before a237675aa1e62bbfaa341c535331c8656a508fa1Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before d0725232da777840703f5f1e22f2e3081d712aa4Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before 7c68283f3166221af3df5791f0e13d3137a72216Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before b3b8b7c040cf069da7afe11c5bd73b870b8f3d18Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before 0f0e59075b5c22f1e871fbd508d6e4f495048356Affected

LinuxLinux

4.5Affected
before 4.5Not affected
4.14.331 through 4.14.*Not affected
4.19.300 through 4.19.*Not affected
5.4.262 through 5.4.*Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.