What is CVE-2023-53806?

CVE-2023-53806 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-09.

How severe is CVE-2023-53806?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2023-53806

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: populate subvp cmd info only for the top pipe [Why] System restart observed while changing the display resolution to 8k with extended mode. Sytem restart was caused by a page fault. [How] When the driver populates subvp info it did it for both the pipes using vblank which caused an outof bounds array access causing the page fault. added checks to allow the top pipe only to fix this issue.

EPSS: 0.002 (6.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c, 4.15, 0

References

Frequently asked questions

What is CVE-2023-53806?: CVE-2023-53806 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-09.
How severe is CVE-2023-53806?: High severity. CVSS v3 base score is 7.8 out of 10.