CVE-2023-52818
AMD Linux Kernel Array Index Out of Bounds Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexible array sizes, use flexible arrays.
INFO
Published Date :
May 21, 2024, 4:15 p.m.
Last Modified :
Dec. 30, 2024, 8:08 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
5.9
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-52818.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-52818 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2023-52818 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Dec. 30, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Added CWE NIST CWE-129 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.14.331 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.15 up to (excluding) 4.19.300 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.262 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.202 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.140 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.64 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.5.13 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6 up to (excluding) 6.6.3 Changed Reference Type https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 No Types Assigned https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 Patch Changed Reference Type https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 No Types Assigned https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 Patch Changed Reference Type https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 No Types Assigned https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 Patch Changed Reference Type https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 No Types Assigned https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 Patch Changed Reference Type https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 No Types Assigned https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 Patch Changed Reference Type https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 No Types Assigned https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 Patch Changed Reference Type https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 No Types Assigned https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 Patch Changed Reference Type https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 No Types Assigned https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 Patch Changed Reference Type https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 No Types Assigned https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 Patch Changed Reference Type https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 No Types Assigned https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 Patch Changed Reference Type https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f No Types Assigned https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f Patch Changed Reference Type https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f No Types Assigned https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f Patch Changed Reference Type https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 No Types Assigned https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 Patch Changed Reference Type https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 No Types Assigned https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 Patch Changed Reference Type https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 No Types Assigned https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 Patch Changed Reference Type https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 No Types Assigned https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 Patch Changed Reference Type https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b No Types Assigned https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b Patch Changed Reference Type https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b No Types Assigned https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b Patch -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 Added Reference https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 Added Reference https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 Added Reference https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 Added Reference https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 Added Reference https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f Added Reference https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 Added Reference https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 Added Reference https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 29, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 21, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexible array sizes, use flexible arrays. Added Reference kernel.org https://git.kernel.org/stable/c/e52e324a21341c97350d5f11de14721c1c609498 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/cfd8cd907fd94538561479a43aea455f5cf16928 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c847379a5d00078ad6fcb1c24230e72c5609342f [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/8af28ae3acb736ada4ce3457662fa446cc913bb4 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/acdb6830de02cf2873aeaccdf2d9bca4aee50e47 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/fc9ac0e8e0bcb3740c6eaad3a1a50c20016d422b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/6dffdddfca818c02a42b6caa1d9845995f0a1f94 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/92a775e7c9707aed28782bafe636bf87675f5a97 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/760efbca74a405dc439a013a5efaa9fadc95a8c3 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-52818 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-52818
weaknesses.