Riskcovery

CVE-2023-52867

drm/radeon: possible buffer overflow

State
Published
Severity
7.1 High
Published
May 21, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: possible buffer overflow

Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before 112d4b02d94bf9fa4f1d3376587878400dd74783Affected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before caaa74541459c4c9e2c10046cf66ad2890483d0fAffected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before ddc42881f170f1f518496f5a70447501335fc783Affected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before 7b063c93bece827fde237fae1c101bceeee4e896Affected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before 347f025a02b3a5d715a0b471fc3b1439c338ad94Affected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before 341e79f8aec6af6b0061b8171d77b085835c6a58Affected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before d9b4fa249deaae1145d6fc2b64dae718e5c7a855Affected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before 19534a7a225f1bf2da70a9a90d41d0215f8f6b45Affected
  • 5cc4e5fc293bfe2634535f544427e8c6061492a5 to before dd05484f99d16715a88eedfca363828ef9a4c2d4Affected
LinuxLinux
  • 4.13Affected
  • before 4.13Not affected
  • 4.14.330 through 4.14.*Not affected
  • 4.19.299 through 4.19.*Not affected
  • 5.4.261 through 5.4.*Not affected
  • 5.10.201 through 5.10.*Not affected
  • 5.15.139 through 5.15.*Not affected
  • 6.1.63 through 6.1.*Not affected
  • 6.5.12 through 6.5.*Not affected
  • 6.6.2 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.