CVE-2023-20598

Published: Oct 17, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Affected (2)

Products: Amd: Radeon Software

Amd

1 product

Radeon Software

Configuration A

49 platform

Running on/with	Platform Versions
Amd Radeon Rx 5300	All versions
Amd Radeon Rx 5300 Xt	All versions
Amd Radeon Rx 5300m	All versions
Amd Radeon Rx 5500	All versions
Amd Radeon Rx 5500 Xt	All versions
Amd Radeon Rx 5500m	All versions
Amd Radeon Rx 5600	All versions
Amd Radeon Rx 5600 Xt	All versions
Amd Radeon Rx 5600m	All versions
Amd Radeon Rx 5700	All versions
Amd Radeon Rx 5700 Xt	All versions
Amd Radeon Rx 5700m	All versions
Amd Radeon Rx 6300m	All versions
Amd Radeon Rx 6400	All versions
Amd Radeon Rx 6450m	All versions
Amd Radeon Rx 6500 Xt	All versions
Amd Radeon Rx 6500m	All versions
Amd Radeon Rx 6550m	All versions
Amd Radeon Rx 6550s	All versions
Amd Radeon Rx 6600	All versions
Amd Radeon Rx 6600 Xt	All versions
Amd Radeon Rx 6600m	All versions
Amd Radeon Rx 6600s	All versions
Amd Radeon Rx 6650 Xt	All versions
Amd Radeon Rx 6650m	All versions
Amd Radeon Rx 6650m Xt	All versions
Amd Radeon Rx 6700	All versions
Amd Radeon Rx 6700 Xt	All versions
Amd Radeon Rx 6700m	All versions
Amd Radeon Rx 6700s	All versions
Amd Radeon Rx 6750 Gre 10gb	All versions
Amd Radeon Rx 6750 Gre 12gb	All versions
Amd Radeon Rx 6750 Xt	All versions
Amd Radeon Rx 6800	All versions
Amd Radeon Rx 6800 Xt	All versions
Amd Radeon Rx 6800s	All versions
Amd Radeon Rx 6900 Xt	All versions
Amd Radeon Rx 6950 Xt	All versions
Amd Radeon Rx 7600	All versions
Amd Radeon Rx 7600m	All versions
Amd Radeon Rx 7600m Xt	All versions
Amd Radeon Rx 7600s	All versions
Amd Radeon Rx 7700 Xt	All versions
Amd Radeon Rx 7700s	All versions
Amd Radeon Rx 7800 Xt	All versions
Amd Radeon Rx 7900 Gre	All versions
Amd Radeon Rx 7900 Xt	All versions
Amd Radeon Rx 7900 Xtx	All versions
Amd Radeon Rx 7900m	All versions

Configuration B

10 platform

Running on/with	Platform Versions
Amd Radeon Pro W5500	All versions
Amd Radeon Pro W5700	All versions
Amd Radeon Pro W6300	All versions
Amd Radeon Pro W6400	All versions
Amd Radeon Pro W6600	All versions
Amd Radeon Pro W6800	All versions
Amd Radeon Pro W7500	All versions
Amd Radeon Pro W7600	All versions
Amd Radeon Pro W7800	All versions
Amd Radeon Pro W7900	All versions

Configuration C

2 vulnerable · 47 platform

Vulnerable Software	Affected Versions
Amd Radeon Software	Before 23.9.2
Amd Radeon Software	Before 23.q4

Running on/with	Platform Versions
Amd Ryzen 3 7320u	All versions
Amd Ryzen 3 7335u	All versions
Amd Ryzen 3 7440u	All versions
Amd Ryzen 5 6600h	All versions
Amd Ryzen 5 6600hs	All versions
Amd Ryzen 5 6600u	All versions
Amd Ryzen 5 7500f	All versions
Amd Ryzen 5 7520u	All versions
Amd Ryzen 5 7535hs	All versions
Amd Ryzen 5 7535u	All versions
Amd Ryzen 5 7540u	All versions
Amd Ryzen 5 7600	All versions
Amd Ryzen 5 7600x	All versions
Amd Ryzen 5 7640h	All versions
Amd Ryzen 5 7640u	All versions
Amd Ryzen 5 7645hx	All versions
Amd Ryzen 5 Pro 7640hs	All versions
Amd Ryzen 5 Pro 7645	All versions
Amd Ryzen 7 6800h	All versions
Amd Ryzen 7 6800hs	All versions
Amd Ryzen 7 6800u	All versions
Amd Ryzen 7 7700	All versions
Amd Ryzen 7 7700x	All versions
Amd Ryzen 7 7735hs	All versions
Amd Ryzen 7 7735u	All versions
Amd Ryzen 7 7736u	All versions
Amd Ryzen 7 7745hx	All versions
Amd Ryzen 7 7800x3d	All versions
Amd Ryzen 7 7840h	All versions
Amd Ryzen 7 7840u	All versions
Amd Ryzen 7 Pro 7745	All versions
Amd Ryzen 7 Pro 7840hs	All versions
Amd Ryzen 9 6900hs	All versions
Amd Ryzen 9 6900hx	All versions
Amd Ryzen 9 6980hs	All versions
Amd Ryzen 9 6980hx	All versions
Amd Ryzen 9 7845hx	All versions
Amd Ryzen 9 7900	All versions
Amd Ryzen 9 7900x	All versions
Amd Ryzen 9 7900x3d	All versions
Amd Ryzen 9 7940h	All versions
Amd Ryzen 9 7945hx	All versions
Amd Ryzen 9 7945hx3d	All versions
Amd Ryzen 9 7950x	All versions
Amd Ryzen 9 7950x3d	All versions
Amd Ryzen 9 Pro 7940hs	All versions
Amd Ryzen 9 Pro 7945	All versions

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.