CVE-2023-52867 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783
https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45
https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58
https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94
https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896
https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f
https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855
https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4
https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783
https://lore.kernel.org/linux-cve-announce/2024052119-CVE-2023-52867-3f26@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52867
https://www.cve.org/CVERecord?id=CVE-2023-52867

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:31:57.866Z

Updated: 2024-08-02T23:11:36.225Z

Reserved: 2024-05-21T15:19:24.262Z

Link: CVE-2023-52867

Vulnrichment

Updated: 2024-08-02T23:11:36.225Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:23.597

Modified: 2024-05-21T16:53:56.550

Link: CVE-2023-52867

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52867 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52867", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.262Z", "datePublished": "2024-05-21T15:31:57.866Z", "dateUpdated": "2024-08-02T23:11:36.225Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:18:43.761Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: possible buffer overflow\n\nBuffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is\nchecked after access."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/radeon/evergreen.c"], "versions": [{"version": "5cc4e5fc293b", "lessThan": "112d4b02d94b", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "caaa74541459", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "ddc42881f170", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "7b063c93bece", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "347f025a02b3", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "341e79f8aec6", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "d9b4fa249dea", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "19534a7a225f", "status": "affected", "versionType": "git"}, {"version": "5cc4e5fc293b", "lessThan": "dd05484f99d1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/radeon/evergreen.c"], "versions": [{"version": "4.13", "status": "affected"}, {"version": "0", "lessThan": "4.13", "status": "unaffected", "versionType": "custom"}, {"version": "4.14.330", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.299", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.261", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.201", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.15.139", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.1.63", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.5.12", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.6.2", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783"}, {"url": "https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f"}, {"url": "https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783"}, {"url": "https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896"}, {"url": "https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94"}, {"url": "https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58"}, {"url": "https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855"}, {"url": "https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45"}, {"url": "https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4"}], "title": "drm/radeon: possible buffer overflow", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52867", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:50:12.334865Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:22:41.676Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.225Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.225Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52867", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:50:12.334865Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:25.341Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "drm/radeon: possible buffer overflow", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5cc4e5fc293b", "lessThan": "112d4b02d94b", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "caaa74541459", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "ddc42881f170", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "7b063c93bece", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "347f025a02b3", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "341e79f8aec6", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "d9b4fa249dea", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "19534a7a225f", "versionType": "git"}, {"status": "affected", "version": "5cc4e5fc293b", "lessThan": "dd05484f99d1", "versionType": "git"}], "programFiles": ["drivers/gpu/drm/radeon/evergreen.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.13"}, {"status": "unaffected", "version": "0", "lessThan": "4.13", "versionType": "custom"}, {"status": "unaffected", "version": "4.14.330", "versionType": "custom", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.299", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.261", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.201", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.139", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.63", "versionType": "custom", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.12", "versionType": "custom", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.2", "versionType": "custom", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpu/drm/radeon/evergreen.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783"}, {"url": "https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f"}, {"url": "https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783"}, {"url": "https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896"}, {"url": "https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94"}, {"url": "https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58"}, {"url": "https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855"}, {"url": "https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45"}, {"url": "https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: possible buffer overflow\n\nBuffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is\nchecked after access."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:18:43.761Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52867", "state": "PUBLISHED", "dateUpdated": "2024-08-02T23:11:36.225Z", "dateReserved": "2024-05-21T15:19:24.262Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:31:57.866Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}