Lucene search

[email protected]NVD:CVE-2023-20598

HistoryOct 17, 2023 - 2:15 p.m.

CVE-2023-20598

2023-10-1714:15:09

CWE-269

[email protected]

web.nvd.nist.gov

cve-2023-20598

privilege management

amd radeon

graphics driver

ioctl request

arbitrary code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Affected configurations

Nvd

Node

amdradeon_rx_5300Match-

amdradeon_rx_5300_xtMatch-

amdradeon_rx_5300mMatch-

amdradeon_rx_5500Match-

amdradeon_rx_5500_xtMatch-

amdradeon_rx_5500mMatch-

amdradeon_rx_5600Match-

amdradeon_rx_5600_xtMatch-

amdradeon_rx_5600mMatch-

amdradeon_rx_5700Match-

amdradeon_rx_5700_xtMatch-

amdradeon_rx_5700mMatch-

amdradeon_rx_6300mMatch-

amdradeon_rx_6400Match-

amdradeon_rx_6450mMatch-

amdradeon_rx_6500_xtMatch-

amdradeon_rx_6500mMatch-

amdradeon_rx_6550mMatch-

amdradeon_rx_6550sMatch-

amdradeon_rx_6600Match-

amdradeon_rx_6600_xtMatch-

amdradeon_rx_6600mMatch-

amdradeon_rx_6600sMatch-

amdradeon_rx_6650_xtMatch-

amdradeon_rx_6650mMatch-

amdradeon_rx_6650m_xtMatch-

amdradeon_rx_6700Match-

amdradeon_rx_6700_xtMatch-

amdradeon_rx_6700mMatch-

amdradeon_rx_6700sMatch-

amdradeon_rx_6750_gre_10gbMatch-

amdradeon_rx_6750_gre_12gbMatch-

amdradeon_rx_6750_xtMatch-

amdradeon_rx_6800Match-

amdradeon_rx_6800_xtMatch-

amdradeon_rx_6800sMatch-

amdradeon_rx_6900_xtMatch-

amdradeon_rx_6950_xtMatch-

amdradeon_rx_7600Match-

amdradeon_rx_7600mMatch-

amdradeon_rx_7600m_xtMatch-

amdradeon_rx_7600sMatch-

amdradeon_rx_7700_xtMatch-

amdradeon_rx_7700sMatch-

amdradeon_rx_7800_xtMatch-

amdradeon_rx_7900_greMatch-

amdradeon_rx_7900_xtMatch-

amdradeon_rx_7900_xtxMatch-

amdradeon_rx_7900mMatch-

AND

amdradeon_softwareRange<23.9.2adrenalin

Node

amdradeon_pro_w5500Match-

amdradeon_pro_w5700Match-

amdradeon_pro_w6300Match-

amdradeon_pro_w6400Match-

amdradeon_pro_w6600Match-

amdradeon_pro_w6800Match-

amdradeon_pro_w7500Match-

amdradeon_pro_w7600Match-

amdradeon_pro_w7800Match-

amdradeon_pro_w7900Match-

AND

amdradeon_softwareRange<23.q4pro

Node

amdryzen_3_7320uMatch-

amdryzen_3_7335uMatch-

amdryzen_3_7440uMatch-

amdryzen_5_6600hMatch-

amdryzen_5_6600hsMatch-

amdryzen_5_6600uMatch-

amdryzen_5_7500fMatch-

amdryzen_5_7520uMatch-

amdryzen_5_7535hsMatch-

amdryzen_5_7535uMatch-

amdryzen_5_7540uMatch-

amdryzen_5_7600Match-

amdryzen_5_7600xMatch-

amdryzen_5_7640hMatch-

amdryzen_5_7640uMatch-

amdryzen_5_7645hxMatch-

amdryzen_5_pro_7640hsMatch-

amdryzen_5_pro_7645Match-

amdryzen_7_6800hMatch-

amdryzen_7_6800hsMatch-

amdryzen_7_6800uMatch-

amdryzen_7_7700Match-

amdryzen_7_7700xMatch-

amdryzen_7_7735hsMatch-

amdryzen_7_7735uMatch-

amdryzen_7_7736uMatch-

amdryzen_7_7745hxMatch-

amdryzen_7_7800x3dMatch-

amdryzen_7_7840hMatch-

amdryzen_7_7840uMatch-

amdryzen_7_pro_7745Match-

amdryzen_7_pro_7840hsMatch-

amdryzen_9_6900hsMatch-

amdryzen_9_6900hxMatch-

amdryzen_9_6980hsMatch-

amdryzen_9_6980hxMatch-

amdryzen_9_7845hxMatch-

amdryzen_9_7900Match-

amdryzen_9_7900xMatch-

amdryzen_9_7900x3dMatch-

amdryzen_9_7940hMatch-

amdryzen_9_7945hxMatch-

amdryzen_9_7945hx3dMatch-

amdryzen_9_7950xMatch-

amdryzen_9_7950x3dMatch-

amdryzen_9_pro_7940hsMatch-

amdryzen_9_pro_7945Match-

AND

amdradeon_softwareRange<23.9.2adrenalin

amdradeon_softwareRange<23.q4pro

VendorProductVersionCPE
amdradeon_rx_5300-cpe:2.3:h:amd:radeon_rx_5300:-:*:*:*:*:*:*:*
amdradeon_rx_5300_xt-cpe:2.3:h:amd:radeon_rx_5300_xt:-:*:*:*:*:*:*:*
amdradeon_rx_5300m-cpe:2.3:h:amd:radeon_rx_5300m:-:*:*:*:*:*:*:*
amdradeon_rx_5500-cpe:2.3:h:amd:radeon_rx_5500:-:*:*:*:*:*:*:*
amdradeon_rx_5500_xt-cpe:2.3:h:amd:radeon_rx_5500_xt:-:*:*:*:*:*:*:*
amdradeon_rx_5500m-cpe:2.3:h:amd:radeon_rx_5500m:-:*:*:*:*:*:*:*
amdradeon_rx_5600-cpe:2.3:h:amd:radeon_rx_5600:-:*:*:*:*:*:*:*
amdradeon_rx_5600_xt-cpe:2.3:h:amd:radeon_rx_5600_xt:-:*:*:*:*:*:*:*
amdradeon_rx_5600m-cpe:2.3:h:amd:radeon_rx_5600m:-:*:*:*:*:*:*:*
amdradeon_rx_5700-cpe:2.3:h:amd:radeon_rx_5700:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	radeon_rx_5300	-	cpe:2.3:h:amd:radeon_rx_5300:-:::::::*
amd	radeon_rx_5300_xt	-	cpe:2.3:h:amd:radeon_rx_5300_xt:-:::::::*
amd	radeon_rx_5300m	-	cpe:2.3:h:amd:radeon_rx_5300m:-:::::::*
amd	radeon_rx_5500	-	cpe:2.3:h:amd:radeon_rx_5500:-:::::::*
amd	radeon_rx_5500_xt	-	cpe:2.3:h:amd:radeon_rx_5500_xt:-:::::::*
amd	radeon_rx_5500m	-	cpe:2.3:h:amd:radeon_rx_5500m:-:::::::*
amd	radeon_rx_5600	-	cpe:2.3:h:amd:radeon_rx_5600:-:::::::*
amd	radeon_rx_5600_xt	-	cpe:2.3:h:amd:radeon_rx_5600_xt:-:::::::*
amd	radeon_rx_5600m	-	cpe:2.3:h:amd:radeon_rx_5600m:-:::::::*
amd	radeon_rx_5700	-	cpe:2.3:h:amd:radeon_rx_5700:-:::::::*