CVE-2023-53309

drm/radeon: Fix integer overflow in radeon_cs_parser_init

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: Fix integer overflow in radeon_cs_parser_init

The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	28a326c592e3e444c59f28b3e60c3b07692928d6 to before d05ba46134d07e889de7d23cf8503574a22ede09Affected 28a326c592e3e444c59f28b3e60c3b07692928d6 to before cfa9148bafb2d3292b65de1bac79dcca65be2643Affected 28a326c592e3e444c59f28b3e60c3b07692928d6 to before b8fab6aebdf2115ec2d7bd2f3498d5b911ff351eAffected 28a326c592e3e444c59f28b3e60c3b07692928d6 to before e6825b30d37fe89ceb87f926d33d4fad321a331eAffected 28a326c592e3e444c59f28b3e60c3b07692928d6 to before c0d7dbc6b7a61a56028118c00af2c8319d44a682Affected 28a326c592e3e444c59f28b3e60c3b07692928d6 to before 2e1be420b86980c25a75325e90dfc3fc73126f61Affected 28a326c592e3e444c59f28b3e60c3b07692928d6 to before 25e634d7f44eb13113139040e5366bebe48c882fAffected 28a326c592e3e444c59f28b3e60c3b07692928d6 to before f828b681d0cd566f86351c0b913e6cb6ed8c7b9cAffected
LinuxLinux	3.13Affected before 3.13Not affected 4.14.324 through 4.14.Not affected 4.19.293 through 4.19.Not affected 5.4.255 through 5.4.Not affected 5.10.192 through 5.10.Not affected 5.15.123 through 5.15.Not affected 6.1.42 through 6.1.Not affected 6.4.7 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

28a326c592e3e444c59f28b3e60c3b07692928d6 to before d05ba46134d07e889de7d23cf8503574a22ede09Affected
28a326c592e3e444c59f28b3e60c3b07692928d6 to before cfa9148bafb2d3292b65de1bac79dcca65be2643Affected
28a326c592e3e444c59f28b3e60c3b07692928d6 to before b8fab6aebdf2115ec2d7bd2f3498d5b911ff351eAffected
28a326c592e3e444c59f28b3e60c3b07692928d6 to before e6825b30d37fe89ceb87f926d33d4fad321a331eAffected
28a326c592e3e444c59f28b3e60c3b07692928d6 to before c0d7dbc6b7a61a56028118c00af2c8319d44a682Affected
28a326c592e3e444c59f28b3e60c3b07692928d6 to before 2e1be420b86980c25a75325e90dfc3fc73126f61Affected
28a326c592e3e444c59f28b3e60c3b07692928d6 to before 25e634d7f44eb13113139040e5366bebe48c882fAffected
28a326c592e3e444c59f28b3e60c3b07692928d6 to before f828b681d0cd566f86351c0b913e6cb6ed8c7b9cAffected

LinuxLinux

3.13Affected
before 3.13Not affected
4.14.324 through 4.14.*Not affected
4.19.293 through 4.19.*Not affected
5.4.255 through 5.4.*Not affected
5.10.192 through 5.10.*Not affected
5.15.123 through 5.15.*Not affected
6.1.42 through 6.1.*Not affected
6.4.7 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.