What’s Vulnerable › Vulnerabilities

CVE-2023-52867: drm/radeon: possible buffer overflow

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-08-04
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Affected products

• Linux kernel: from 4.13 before 4.14.330; from 4.15 before 4.19.299; from 4.20 before 5.4.261; from 5.5 before 5.10.201; from 5.11 before 5.15.139; from 5.16 before 6.1.63 — fixed in 4.14.330, 4.19.299, 5.10.201, 5.15.139, 5.4.261, 6.1.63

How to fix

Upgrade to a fixed version: Linux kernel 4.14.330, 4.19.299, 5.10.201, 5.15.139. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783
• https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45
• https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58
• https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94
• https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896
• https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f
• https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855
• https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4
• https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783
• https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783
• https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45
• https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58

Get alerted when CVE-2023-52867 or the next vulnerability affects your stack