CVE-2023-52816

drm/amdkfd: Fix shift out-of-bounds issue

HIGH

7.8

CVSS Score

Published: May 21, 2024 at 03:31 PM UTC

Updated: June 17, 2026 at 06:43 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix shift out-of-bounds issue [ 567.613292] shift exponent 255 is too large for 64-bit type 'long unsigned int' [ 567.614498] CPU: 5 PID: 238 Comm: kworker/5:1 Tainted: G OE 6.2.0-34-generic #34~22.04.1-Ubuntu [ 567.614502] Hardware name: AMD Splinter/Splinter-RPL, BIOS WS43927N_871 09/25/2023 [ 567.614504] Workqueue: events send_exception_work_handler [amdgpu] [ 567.614748] Call Trace: [ 567.614750] <TASK> [ 567.614753] dump_stack_lvl+0x48/0x70 [ 567.614761] dump_stack+0x10/0x20 [ 567.614763] __ubsan_handle_shift_out_of_bounds+0x156/0x310 [ 567.614769] ? srso_alias_return_thunk+0x5/0x7f [ 567.614773] ? update_sd_lb_stats.constprop.0+0xf2/0x3c0 [ 567.614780] svm_range_split_by_granularity.cold+0x2b/0x34 [amdgpu] [ 567.615047] ? srso_alias_return_thunk+0x5/0x7f [ 567.615052] svm_migrate_to_ram+0x185/0x4d0 [amdgpu] [ 567.615286] do_swap_page+0x7b6/0xa30 [ 567.615291] ? srso_alias_return_thunk+0x5/0x7f [ 567.615294] ? __free_pages+0x119/0x130 [ 567.615299] handle_pte_fault+0x227/0x280 [ 567.615303] __handle_mm_fault+0x3c0/0x720 [ 567.615311] handle_mm_fault+0x119/0x330 [ 567.615314] ? lock_mm_and_find_vma+0x44/0x250 [ 567.615318] do_user_addr_fault+0x1a9/0x640 [ 567.615323] exc_page_fault+0x81/0x1b0 [ 567.615328] asm_exc_page_fault+0x27/0x30 [ 567.615332] RIP: 0010:__get_user_8+0x1c/0x30

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.14 ≤ v < 5.15.1405.14 ≤ v < 6.1.645.14 ≤ v < 6.5.135.14 ≤ v < 6.6.35.14 ≤ v < 6.75.16 ≤ v < 6.1.646.2 ≤ v < 6.5.136.6 ≤ v < 6.6.342de677f79999791bee4e21be318c32d90ab62c65.14

Vendor states this is fixed in 2806f880379232e789957c2078d612669eb7a69c (fixed)

Vendor states this is fixed in 282c1d793076c2edac6c3db51b7e8ed2b41d60a5 (fixed)

Vendor states this is fixed in 3f7a400d5e80f99581e3e8a9843e1f6118bf454f (fixed)

Vendor states this is fixed in 56649c43d40ce0147465a2d5756d300e87f9ee1c (fixed)

Vendor states this is fixed in d33a35b13cbfec3238043f196fa87a6384f9d087 (fixed)

Vendor states this is fixed in 5.14 (unaffected)

Vendor states this is fixed in 5.15.140 (unaffected)

Vendor states this is fixed in 6.1.64 (unaffected)

Vendor states this is fixed in 6.5.13 (unaffected)

Vendor states this is fixed in 6.6.3 (unaffected)

Vendor states this is fixed in 6.7 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references