Riskcovery

CVE-2023-53707

drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

State
Published
Severity
7.8 High
Published
Oct 22, 2025
Updated
Oct 3, 2026
Reserved
Oct 22, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

The type of size is unsigned int, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 8fb035232b505ab12119adf78f5fc1f93f2b7e24Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6e03634f44cd5988ee5b6cdd4f849e73762095e7Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 9f55d300541cb5b435984d269087810581580b00Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before c3deb091398e9e469d08dd1599b6d76fd6b29df8Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 87c2213e85bd81e4a9a4d0880c256568794ae388Affected
LinuxLinux
  • 4.2Affected
  • before 4.2Not affected
  • 5.10.271 through 5.10.*Not affected
  • 5.15.222 through 5.15.*Not affected
  • 6.1.47 through 6.1.*Not affected
  • 6.4.12 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.