CVE-2023-52812: drm/amd: check num of link levels when update pcie param
In the Linux kernel, the following vulnerability has been resolved:
drm/amd: check num of link levels when update pcie param
In SR-IOV environment, the value of pcietable->numoflinklevels will be 0, and numoflevels - 1 will cause array index out of bounds
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52812?
The severity of CVE-2023-52812 is categorized as high due to the potential for array index out of bounds in the Linux kernel.
How do I fix CVE-2023-52812?
To fix CVE-2023-52812, update the Linux kernel to at least version 6.5.13 or upgrade to a version above 6.6.3.
What systems are affected by CVE-2023-52812?
CVE-2023-52812 affects the Linux kernel versions prior to 6.5.13 and those in the range of 6.6.0 to 6.6.3.
What components are impacted by CVE-2023-52812?
CVE-2023-52812 specifically impacts the drm/amd component related to PCIe parameter updates in SR-IOV environments.
Is there a workaround for CVE-2023-52812?
Currently, there are no official workarounds for CVE-2023-52812; the recommended action is to apply the kernel update.