What’s Vulnerable › Vulnerabilities
CVE-2023-4969: GPU kernel implementations susceptible to memory leak
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-01-16 · updated 2026-06-17
- Weakness: CWE-401
Description
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.
Affected products
- AMD Athlon 3000G Firmware: all versions
- AMD Instinct Mi100 Firmware: all versions
- AMD Instinct Mi210 Firmware: all versions
- AMD Instinct Mi250 Firmware: all versions
- AMD Instinct Mi300A Firmware: all versions
- AMD Instinct Mi300X Firmware: all versions
- AMD Radeon Instinct Mi25 Firmware: all versions
- AMD Radeon Instinct Mi50 Firmware: all versions
- AMD Radeon Pro V520 Firmware: all versions
- AMD Radeon Pro V620 Firmware: all versions
- AMD Radeon Pro W5500X Firmware: all versions
- AMD Radeon Pro W5700X Firmware: all versions
- AMD Radeon Pro W6300M Firmware: all versions
- AMD Radeon Pro W6400 Firmware: all versions
- AMD Radeon Pro W6500M Firmware: all versions
- AMD Radeon Pro W7500 Firmware: all versions
- AMD Radeon Pro W7600 Firmware: all versions
- AMD Radeon Rx 5300 Firmware: all versions
- AMD Radeon Rx 5300M Firmware: all versions
- AMD Radeon Rx 5300Xt Firmware: all versions
- AMD Radeon Rx 5500 Firmware: all versions
- AMD Radeon Rx 5500M Firmware: all versions
- AMD Radeon Rx 5500Xt Firmware: all versions
- AMD Radeon Rx 5600 Firmware: all versions
- AMD Radeon Rx 5600M Firmware: all versions
- AMD Radeon Rx 5600Xt Firmware: all versions
- AMD Radeon Rx 5700 Firmware: all versions
- AMD Radeon Rx 5700M Firmware: all versions
- AMD Radeon Rx 5700Xt Firmware: all versions
- AMD Radeon Rx 6800 Firmware: all versions
References
- https://blog.trailofbits.com
- https://kb.cert.org/vuls/id/446598
- https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions
- https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html
- https://www.kb.cert.org/vuls/id/446598
- https://blog.trailofbits.com
- https://kb.cert.org/vuls/id/446598
- https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions
- https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html
- https://www.kb.cert.org/vuls/id/446598
Get alerted when CVE-2023-4969 or the next vulnerability affects your stack