In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix integer overflow in radeoncsparser_init
The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e1be420b86980c25a75325e90dfc3fc73126f61",
"deprecated": false,
"id": "CVE-2023-53309-0c796860",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e1be420b86980c25a75325e90dfc3fc73126f61",
"deprecated": false,
"id": "CVE-2023-53309-1981b3fb",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25e634d7f44eb13113139040e5366bebe48c882f",
"deprecated": false,
"id": "CVE-2023-53309-26a54662",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6825b30d37fe89ceb87f926d33d4fad321a331e",
"deprecated": false,
"id": "CVE-2023-53309-2b0dd86c",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6825b30d37fe89ceb87f926d33d4fad321a331e",
"deprecated": false,
"id": "CVE-2023-53309-35c05e6f",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25e634d7f44eb13113139040e5366bebe48c882f",
"deprecated": false,
"id": "CVE-2023-53309-3620ac77",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0d7dbc6b7a61a56028118c00af2c8319d44a682",
"deprecated": false,
"id": "CVE-2023-53309-3c9ec427",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0d7dbc6b7a61a56028118c00af2c8319d44a682",
"deprecated": false,
"id": "CVE-2023-53309-4585dd86",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfa9148bafb2d3292b65de1bac79dcca65be2643",
"deprecated": false,
"id": "CVE-2023-53309-487bb576",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d05ba46134d07e889de7d23cf8503574a22ede09",
"deprecated": false,
"id": "CVE-2023-53309-5572dabe",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d05ba46134d07e889de7d23cf8503574a22ede09",
"deprecated": false,
"id": "CVE-2023-53309-5fb651c2",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f828b681d0cd566f86351c0b913e6cb6ed8c7b9c",
"deprecated": false,
"id": "CVE-2023-53309-87078b05",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8fab6aebdf2115ec2d7bd2f3498d5b911ff351e",
"deprecated": false,
"id": "CVE-2023-53309-a4204e98",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8fab6aebdf2115ec2d7bd2f3498d5b911ff351e",
"deprecated": false,
"id": "CVE-2023-53309-aa4a178a",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"25452147774034677556354001444890485557",
"335580805511076371448865203034318222546",
"161963962064476722803294647958916521425",
"295707149315203052136690917831945416372"
]
},
"target": {
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f828b681d0cd566f86351c0b913e6cb6ed8c7b9c",
"deprecated": false,
"id": "CVE-2023-53309-ac14a5e7",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfa9148bafb2d3292b65de1bac79dcca65be2643",
"deprecated": false,
"id": "CVE-2023-53309-facd0c94",
"signature_type": "Function",
"digest": {
"length": 3401.0,
"function_hash": "192711696924218312897557233185514501577"
},
"target": {
"function": "radeon_cs_parser_init",
"file": "drivers/gpu/drm/radeon/radeon_cs.c"
}
}
]