CVEvulnerability
CVE-2023-4969
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-01-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Weaknesses
- CWE-401
Description
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.
Affected configurations
• khronos opencl (<= 3.0.11)
• khronos vulkan (<= 1.3.224)
• imaginationtech ddk (<= 23.2)
• amd instinct mi300x firmware
• amd instinct mi300a firmware
• amd instinct mi250 firmware
• amd instinct mi210 firmware
• amd instinct mi100 firmware
• amd radeon instinct mi50 firmware
• amd radeon instinct mi25 firmware
• amd radeon pro v620 firmware
• amd radeon pro v520 firmware
• amd radeon pro w7600 firmware
• amd radeon pro w7500 firmware
• amd radeon pro w6400 firmware
• amd radeon pro w6500m firmware
• amd radeon pro w6300m firmware
• amd radeon pro w5700x firmware
• amd radeon pro w5500x firmware
• amd radeon rx 7900xtx firmware
• amd radeon rx 7900xt firmware
• amd radeon rx 7800xt firmware
• amd radeon rx 7700xt firmware
• amd radeon rx 7600xt firmware
• amd radeon rx 7600 firmware
• amd radeon rx 6950xt firmware
• amd radeon rx 6900xt firmware
• amd radeon rx 6800xt firmware
• amd radeon rx 6800 firmware
• amd radeon rx 5300m firmware
• amd radeon rx 5300 firmware
• amd radeon rx 5300xt firmware
• amd radeon rx 5500m firmware
• amd radeon rx 5500 firmware
• amd radeon rx 5500xt firmware
• amd radeon rx 5600m firmware
• amd radeon rx 5600 firmware
• amd radeon rx 5600xt firmware
• amd radeon rx 5700m firmware
• amd radeon rx 5700 firmware
• amd radeon rx 5700xt firmware
• amd ryzen 9 7945hx3d firmware
• amd ryzen 9 7945hx firmware
• amd ryzen 9 7845hx firmware
• amd ryzen 7 7745hx firmware
• amd ryzen 5 7645hx firmware
• amd ryzen 9 7940h firmware
• amd ryzen 9 pro 7945hs firmware
• amd ryzen 7 pro 7840hs firmware
• amd ryzen 7 7840h firmware
• amd ryzen 7 pro 7840u firmware
• amd ryzen 5 pro 7640hs firmware
• amd ryzen 5 7640h firmware
• amd ryzen 5 pro 7640u firmware
• amd ryzen 5 pro 7545u firmware
• amd ryzen 5 pro 7540u firmware
• amd ryzen 3 7440u firmware
• amd ryzen 7 5700g firmware
• amd ryzen 7 5700ge firmware
• amd ryzen 5 5600gt firmware
… and 72 more
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://blog.trailofbits.com Exploit, Mitigation, Third Party Advisory
- https://kb.cert.org/vuls/id/446598 Third Party Advisory, US Government Resource
- https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions Technical Description
- https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/446598 Third Party Advisory, US Government Resource
- https://blog.trailofbits.com Exploit, Mitigation, Third Party Advisory
- https://kb.cert.org/vuls/id/446598 Third Party Advisory, US Government Resource
- https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions Technical Description
- https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/446598 Third Party Advisory, US Government Resource