What’s Vulnerable › Vulnerabilities

CVE-2023-53707: drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-22 · updated 2026-10-28

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 The type of size is unsigned int, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later.

Affected products

• Linux kernel: 4.2 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/6e03634f44cd5988ee5b6cdd4f849e73762095e7
• https://git.kernel.org/stable/c/87c2213e85bd81e4a9a4d0880c256568794ae388
• https://git.kernel.org/stable/c/8fb035232b505ab12119adf78f5fc1f93f2b7e24
• https://git.kernel.org/stable/c/9f55d300541cb5b435984d269087810581580b00
• https://git.kernel.org/stable/c/c3deb091398e9e469d08dd1599b6d76fd6b29df8

Get alerted when CVE-2023-53707 or the next vulnerability affects your stack