CVE-2023-52921

Summary

CVE-2023-52921 is a vulnerability affecting the Linux kernel that has been addressed. In the amdgpu driver, a Use-After-Free (UAF) condition was identified in the function amdgpu_cs_pass1(). The issue occurred because the gang_size check was positioned outside of the chunk parsing loop, resulting in the need to reset the i variable before freeing the chunk data to prevent the UAF. This vulnerability was reported by Ye Zhang of Baidu Security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.