cbcvebase.
CVE-2023-52815
published 2024-05-21

CVE-2023-52815: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vkms: fix a possible null pointer dereference In amdgpu_vkms_conn_get_modes()…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.6th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vkms: fix a possible null pointer dereference In amdgpu_vkms_conn_get_modes(), the return value of drm_cvt_mode() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_cvt_mode(). Add a check to avoid null pointer dereference.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.64-1 (bookworm)linux 6.1.64-1 (bookworm)
linuxlinux
linuxlinux>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < eaa03ea366c85ae3cb69c8d4bbc67c8bc2167a27eaa03ea366c85ae3cb69c8d4bbc67c8bc2167a27
linuxlinux>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 33fb1a555354bd593f785935ddcb5d9dd4d3847f33fb1a555354bd593f785935ddcb5d9dd4d3847f
linuxlinux>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 8c6c85a073768df68c1a3fea143d013a38c66d348c6c85a073768df68c1a3fea143d013a38c66d34
linuxlinux>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 70f831f21155c692bb336c434936fd6f24f3f81a70f831f21155c692bb336c434936fd6f24f3f81a
linuxlinux>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < cd90511557fdfb394bb4ac4c3b539b007383914ccd90511557fdfb394bb4ac4c3b539b007383914c
linuxlinux_kernel< 5.15.1405.15.140
linuxlinux_kernel>= 0 < 6.1.64-16.1.64-1
linuxlinux_kernel>= 0 < 6.5.13-16.5.13-1
linuxlinux_kernel>= 0 < 6.5.13-16.5.13-1
linuxlinux_kernel>= 5.16 < 6.1.646.1.64
linuxlinux_kernel>= 6.2 < 6.5.136.5.13
linuxlinux_kernel>= 6.6 < 6.6.36.6.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.