First published: Tue Aug 08 2023(Updated: )
Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.
Credit: psirt@amd.com psirt@amd.com
Affected Software | Affected Version | How to fix |
---|---|---|
Amd Amd Uprof | <4.1.396 | |
Microsoft Windows | ||
Amd Amd Uprof | <4.1-424 | |
Linux Linux kernel |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2023-20562.
The severity of CVE-2023-20562 is high with a CVSS score of 7.8.
The affected software is AMD uProf 4.1.396 up to exclusive 4.1-424.
This vulnerability in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.
No, Linux Kernel is not affected by this vulnerability.