CVE-2023-53819

A flaw was found in the AMDGPU graphics driver within the Linux kernel was identified where the offset_in_bo parameter in the drm_amdgpu_gem_va handler was not sufficiently validated. Under certain conditions, an addition of offset_in_bo and map_size can overflow, resulting in an out-of-bounds access during GPU virtual memory range updates. A local user with the ability to interact with the affected driver could exploit this behavior to cause memory corruption,

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and is constrained to systems with specific physical or virtualized AMD graphics hardware. Unprivileged users without direct access to the Direct Rendering Manager (DRM) device interfaces cannot trigger the flaw. While an integer overflow can lead to kernel memory corruption or denial of service, the blast radius is restricted to local execution environments utilizing the amdgpu driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.