CVE-2023-20511

Summary

Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
AMDAMD Radeon™ Instinct™ MI25 Graphics ProductsContact your AMD Customer Engineering representativeunaffected
AMDAMD Radeon™ PRO V620 Graphics ProductsContact your AMD Customer Engineering representativeunaffected

Weaknesses

  • CWE-763: CWE-763 Release of Invalid Pointer or Reference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References