CVE-2023-52691: drm/amd/pm: fix a double-free in si_dpm_init
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: fix a double-free in sidpminit
When the allocation of adev->pm.dpm.dynstate.vddcdependencyondispclk.entries fails, amdgpufreeextendedpowertable is called to free some fields of adev. However, when the control flow returns to sidpmswinit, it goes to label dpmfailed and calls sidpmfini, which calls amdgpufreeextendedpowertable again and free those fields again. Thus a double-free is triggered.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52691?
CVE-2023-52691 is categorized as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52691?
To fix CVE-2023-52691, update your Linux kernel to the latest patched version as indicated in your distribution's package management system.
Which versions of the Linux kernel are affected by CVE-2023-52691?
CVE-2023-52691 affects various versions of the Linux kernel ranging from 4.9 to 6.7.
What type of vulnerability is CVE-2023-52691?
CVE-2023-52691 is a memory management vulnerability due to a double-free error during dynamic state allocation.
Is CVE-2023-52691 specific to a certain Linux distribution?
No, CVE-2023-52691 is a vulnerability in the Linux kernel that affects multiple distributions, including Debian.