CVEvulnerability
CVE-2023-20562
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.
Affected configurations
• amd amd uprof (< 4.1.396)
• amd amd uprof (< 4.1-424)
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003 Patch, Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003 Patch, Vendor Advisory