PT-2024-14593 · Linux+2 · Linux Kernel+2

Published 2023-12-19 · Updated 2026-05-26 · CVE-2023-52485

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when the DMCUB isn't powered on, causing the system to hang in place while trying to send commands. To resolve this, functions executing within a DC context or DC lock can wrap direct calls to dm execute dmub cmd/list with code that exits idle power optimizations and reallows once the command submission is successful. For DM direct submissions, the DM needs to manage the enter/exit sequencing manually. Invoking a DMCUB command directly within the DM execution helper can cause a deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-833

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2025-12647

AZL-55256

AZL-55279

BDU:2025-10572

CVE-2023-52485

ECHO-F2CF-36AF-87D6

Affected Products

Alt Linux

Debian

Linux Kernel

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52485.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52485 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52485 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-52485 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52485 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-52485 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-52485 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-52485 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52485 · Security Note
• https://osv.dev/vulnerability/AZL-55279 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52485 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10572 · Security Note
• https://git.kernel.org/stable/c/8892780834ae294bc3697c7d0e056d7743900b39 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-52485 · Vendor Advisory