Review reviewHigh

CVE-2023-52825

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix a race condition of vram buffer unref in svm code prange->svm_bo unref can happen in both mmu callback and a callback after migrate to system ram. Both are async call in different tasks. Sync svm_bo unref operation to avoid random "use-after-free".

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2024.05.22

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= e49fe4040a10c1cd3b215c511f658d15aa7c8be9 < 7d43cdd22cd81a2b079e864c4321b9aba4c6af34, >= e49fe4040a10c1cd3b215c511f658d15aa7c8be9 < 50f35a907c4f9ed431fd3dbb8b871ef1cbb0718e, >= e49fe4040a10c1cd3b215c511f658d15aa7c8be9 < c772eacbd6d0845fc922af8716bb9d29ae27b8cf, >= e49fe4040a10c1cd3b215c511f658d15aa7c8be9 < fc0210720127cc6302e6d6f3de48f49c3fcf5659, >= e49fe4040a10c1cd3b215c511f658d15aa7c8be9 < 709c348261618da7ed89d6c303e2ceb9e453ba74, >= 5.14, < 5.15.140, >= 5.16 < 6.1.64, >= 6.2 < 6.5.13, >= 6.6 < 6.6.3
Fixed versions: 5.15.140, 6.1.64, 6.5.13, 6.6.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-362