In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() Return invalid error code -EINVAL for invalid block id. Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c:1183 amdgpu_ras_query_error_status_helper() error: we previously assumed 'info' could be null (see line 1176)

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/0eb296233f86750102aa43b97879b8d8311f249a cve-icon cve-icon
https://git.kernel.org/stable/c/195a6289282e039024ad30ba66e6f94a4d0fbe49 cve-icon cve-icon
https://git.kernel.org/stable/c/467139546f3fb93913de064461b1a43a212d7626 cve-icon cve-icon
https://git.kernel.org/stable/c/7e6d6f27522bcd037856234b720ff607b9c4a09b cve-icon cve-icon
https://git.kernel.org/stable/c/92cb363d16ac1e41c9764cdb513d0e89a6ff4915 cve-icon cve-icon
https://git.kernel.org/stable/c/b8d55a90fd55b767c25687747e2b24abd1ef8680 cve-icon cve-icon
https://git.kernel.org/stable/c/c364e7a34c85c2154fb2e47561965d5b5a0b69b1 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024030643-CVE-2023-52585-7dbc@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52585 cve-icon
https://security.netapp.com/advisory/ntap-20240912-0009/ cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52585 cve-icon
History

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Wed, 13 Nov 2024 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 06 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Mon, 04 Nov 2024 13:45:00 +0000

Type Values Removed Values Added
References

Mon, 04 Nov 2024 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-06T06:45:20.389Z

Updated: 2024-11-06T16:09:44.599Z

Reserved: 2024-03-02T21:55:42.570Z

Link: CVE-2023-52585

cve-icon Vulnrichment

Updated: 2024-09-12T16:02:56.000Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-03-06T07:15:07.290

Modified: 2024-11-21T08:40:07.623

Link: CVE-2023-52585

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-03-06T00:00:00Z

Links: CVE-2023-52585 - Bugzilla