CVE-2023-52585

drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()

MEDIUM
5.5
CVSS Score
Published: March 6, 2024 at 06:45 AM UTC
Updated: August 15, 2026 at 01:36 PM UTC
8 products affected across 3 vendorsLinux KernelDebian LinuxH610S Firmware

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() Return invalid error code -EINVAL for invalid block id. Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c:1183 amdgpu_ras_query_error_status_helper() error: we previously assumed 'info' could be null (see line 1176)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 6.7.45.11 ≤ v < 5.15.1605.16 ≤ v < 6.1.925.4 ≤ v < 5.4.2775.5 ≤ v < 5.10.2186.2 ≤ v < 6.6.326.7 ≤ v < 6.7.46.7 ≤ v < 6.86.78cc0f5669eb6d4f156c721956da67560c9319317
Vendor states this is fixed in 195a6289282e039024ad30ba66e6f94a4d0fbe49 (fixed)
Vendor states this is fixed in b8d55a90fd55b767c25687747e2b24abd1ef8680 (fixed)
Affected range stops below 5.10.218, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.15.160, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.4.277, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.1.92, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.6.32, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.7 (unaffected)
Vendor states this is fixed in 6.7.4 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
All versions
netapp-h610c (same device)
All versions
netapp-h610s (same device)
All versions
netapp-h615c (same device)
All versions
All versions
All versions

References (9)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0eb296233f86750102aa43b97879b8d8311f249a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/195a6289282e039024ad30ba66e6f94a4d0fbe49
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/467139546f3fb93913de064461b1a43a212d7626
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7e6d6f27522bcd037856234b720ff607b9c4a09b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/92cb363d16ac1e41c9764cdb513d0e89a6ff4915
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b8d55a90fd55b767c25687747e2b24abd1ef8680
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c364e7a34c85c2154fb2e47561965d5b5a0b69b1
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card