CVE-2023-52867

drm/radeon: possible buffer overflow

Severity Score

4.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is
checked after access.

En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: drm/radeon: posible desbordamiento del búfer. El búfer 'afmt_status' de tamaño 6 podría desbordarse, ya que el índice 'afmt_idx' se comprueba después del acceso.

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

*Credits: N/A

CVSS Scores

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

Multiple

Confidentiality

Partial

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-05-21 CVE Reserved
2024-05-21 CVE Published
2024-12-19 CVE Updated
2025-03-29 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (12)

URL	Tag	Source
https://git.kernel.org/stable/c/5cc4e5fc293bfe2634535f544427e8c6061492a5	Vuln. Introduced

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783	2023-11-20
https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f	2023-11-20
https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783	2023-11-20
https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896	2023-11-20
https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94	2023-11-20
https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58	2023-11-20
https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855	2023-11-20
https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45	2023-11-20
https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4	2023-08-30

URL	Date	SRC
https://access.redhat.com/security/cve/CVE-2023-52867	2024-11-12
https://bugzilla.redhat.com/show_bug.cgi?id=2282670	2024-11-12

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 4.14.330 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 4.14.330"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 4.19.299 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 4.19.299"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 5.4.261 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 5.4.261"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 5.10.201 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 5.10.201"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 5.15.139 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 5.15.139"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 6.1.63 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 6.1.63"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 6.5.12 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 6.5.12"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 6.6.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 6.6.2"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.13 < 6.7 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.13 < 6.7"		en		Affected