Vulnerability in Linux

CVE-2023-53819

In the Linux kernel, the following vulnerability has been resolved: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va This is motivated by OOB access in amdgpu_vm_update_range when offset_in_bo+map_size overflows. v2: keep the validations in amdgpu_vm_bo_map v3: add the validations to amdgpu_vm_bo_map/amdgpu_vm_bo_replace_map rather than to amdgpu_gem_va_ioctl

EPSS: 0.002 (7.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 9f7eb5367d0001536c361bd1400e14521f854ff1, 4.2, 0

References

Frequently asked questions

What is CVE-2023-53819?
CVE-2023-53819 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-09.
How severe is CVE-2023-53819?
High severity. CVSS v3 base score is 7.8 out of 10.