CVE-2023-53819

High

Description

In the Linux kernel, the following vulnerability has been resolved: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va This is motivated by OOB access in amdgpu_vm_update_range when offset_in_bo+map_size overflows. v2: keep the validations in amdgpu_vm_bo_map v3: add the validations to amdgpu_vm_bo_map/amdgpu_vm_bo_replace_map rather than to amdgpu_gem_va_ioctl

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedDec 9, 2025
First seenDec 9, 2025

How to fix

Update
  • Linux Linux82aace80cfaab778245bd2f9e31b67953725e4d0, d83c337e654d58d3edd15a2ae76e87dc601c07d9, 968e27fd037ec4732068820a9b9836eccc0e0a12, 4300a47e4017c9febb60ffa7d39723eeaed00f2b, b10db1d2137415e5e7f9706d96cfe77539c499d4, f015aadc0d973047f49526a127e900c488d4e425, bc6dbf34dc4fb639522f3e8e66ef05997c0441ee, 9f0bcf49e9895cb005d78b33a5eebfa11711b425 or later

Affected products

ProductAffected versionsFixed in
Linux Linux9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < 82aace80cfaab778245bd2f9e31b67953725e4d0, 9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < d83c337e654d58d3edd15a2ae76e87dc601c07d9, 9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < 968e27fd037ec4732068820a9b9836eccc0e0a12, 9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < 4300a47e4017c9febb60ffa7d39723eeaed00f2b, 9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < b10db1d2137415e5e7f9706d96cfe77539c499d4, 9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < f015aadc0d973047f49526a127e900c488d4e425, 9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < bc6dbf34dc4fb639522f3e8e66ef05997c0441ee, 9f7eb5367d0001536c361bd1400e14521f854ff1 ≤ v < 9f0bcf49e9895cb005d78b33a5eebfa11711b425, 4.282aace80cfaab778245bd2f9e31b67953725e4d0, d83c337e654d58d3edd15a2ae76e87dc601c07d9, 968e27fd037ec4732068820a9b9836eccc0e0a12, 4300a47e4017c9febb60ffa7d39723eeaed00f2b, b10db1d2137415e5e7f9706d96cfe77539c499d4, f015aadc0d973047f49526a127e900c488d4e425, bc6dbf34dc4fb639522f3e8e66ef05997c0441ee, 9f0bcf49e9895cb005d78b33a5eebfa11711b425

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.