Log in Start free

Vulnerability · Published Mar 27, 2025 · Assigned by Linux

CVE-2023-53009drm/amdkfd: Add sync after creating vram bo

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 92.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync to wait for the initialization completion is to resolve this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.11-1DEBIAN-CVE-2023-53009
Debian:13linux6.1.11-1DEBIAN-CVE-2023-53009
Debian:14linux6.1.11-1DEBIAN-CVE-2023-53009
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2023-53009
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53009
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53009
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2023-53009

Affected products (as reported)

VendorProductVersions
Linux Linux 42de677f79999791bee4e21be318c32d90ab62c6 – before 92af2d3b57a1afdfdcafb1c6a07ffd89cf3e98fb42de677f79999791bee4e21be318c32d90ab62c6 – before ba029e9991d9be90a28b6a0ceb25e9a6fb348829
Linux Linux 5.14

References