In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

The type of size is unsigned int, if size is 0x40000000, there will
be an integer overflow, size will be zero after size *= sizeof(uint32_t),
will cause uninitialized memory to be referenced later.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 22 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 The type of size is unsigned int, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later.
Title drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-22T13:23:43.822Z

Reserved: 2025-10-22T13:21:37.346Z

Link: CVE-2023-53707

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-10-22T14:15:45.303

Modified: 2025-10-22T14:15:45.303

Link: CVE-2023-53707

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.