Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSizeInRequests is zero, UBSAN reports the following warning because dml_log2 returns an unexpected negative value: shift exponent 4294966273 is too large for 32-bit type 'int' [HOW] In the case PTEBufferSizeInRequests is zero, skip the dml_log2() and assign the result directly.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.9, < 5.10.176 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/031f196d1b1b6d5dfcb0533b431e3ab1750e6189Patch
- https://git.kernel.org/stable/c/7257070be70e19a9138f39009c1a26c83a8a7cfaPatch
- https://git.kernel.org/stable/c/a16394b5d661afec9a264fecac3abd87aea439eaPatch
- https://git.kernel.org/stable/c/bec1bea2fa974e63f6059c33edde669c7894d0bcPatch
- https://git.kernel.org/stable/c/e12b95680821b9880cd9992c0f3555389363604fPatch
FAQ
What is CVE-2023-53077?
CVE-2023-53077 is a vulnerability with a CVSS score of 7.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSizeInRequests is zero, UBSAN reports the f...
How severe is CVE-2023-53077?
CVE-2023-53077 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-53077?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.