CVE-2023-54150 | THREATINT

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix an out of bounds error in BIOS parser The array is hardcoded to 8 in atomfirmware.h, but firmware provides a bigger one sometimes. Deferencing the larger array causes an out of bounds error. commit 4fc1ba4aa589 ("drm/amd/display: fix array index out of bound error in bios parser") fixed some of this, but there are two other cases not covered by it. Fix those as well.

PUBLISHED Reserved 2025-12-24 | Published 2025-12-24 | Updated 2025-12-24 | Assigner Linux

Product status

Default status

unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before b8e7589f50b709b647b642531599e70707faf70c

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 66acfe798cd08b36cfbb65a30fab3159811304a7

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 5675ecd2e0b00a4318ba1db1a1234e7d45b13d6b

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before dea2dbec716c38a0b73b6ad01d91e2b120cc5f1e

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before d116db180decec1b21bba31d2ff495ac4d8e1b83

affected

Default status

affected

5.10.181 (semver)

unaffected

5.15.113 (semver)

unaffected

6.1.30 (semver)

unaffected

6.3.4 (semver)

unaffected

6.4 (original_commit_for_fix)

unaffected

References

git.kernel.org/...c/b8e7589f50b709b647b642531599e70707faf70c

git.kernel.org/...c/66acfe798cd08b36cfbb65a30fab3159811304a7

git.kernel.org/...c/5675ecd2e0b00a4318ba1db1a1234e7d45b13d6b

git.kernel.org/...c/dea2dbec716c38a0b73b6ad01d91e2b120cc5f1e

git.kernel.org/...c/d116db180decec1b21bba31d2ff495ac4d8e1b83

cve.org (CVE-2023-54150)

nvd.nist.gov (CVE-2023-54150)

Download JSON