PT-2025-40687 · Amd+4 · Amdgpu+4

Published 2024-04-30 · Updated 2026-05-26 · CVE-2023-53545

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue was identified in the Linux kernel related to the handling of memory management within the DRM/amdgpu subsystem. Specifically, the vulnerability concerns the improper unmapping and removal of a csa va (color space array virtual address). The root page directory BO (BO = buffer object) should be reserved before unmapping and removing a bo va (buffer object virtual address) from the virtual memory area to prevent lock dependency issues. A warning message was observed in the kernel logs during testing, indicating a potential problem in the amdgpu vm bo del function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ALSA-2025_16880

AZL-77432

CVE-2023-53545

ECHO-30F2-89F7-6C0A

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4301-1

Affected Products

Debian

Linux Kernel

Red Hat

Suse

Amdgpu

References · 1016

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53545.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-53545 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-53545 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21056-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4132-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53545 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53545 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53545 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53545 · Vendor Advisory
• https://git.kernel.org/stable/c/5daff15cd013422bc6d1efcfe82b586800025384 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53545 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21064-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-77432 · Vendor Advisory