{"id":"CVE-2023-53248","state":"PUBLISHED","title":"drm/amdgpu: install stub fence into potential unused fence pointers","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: install stub fence into potential unused fence pointers\n\nWhen using cpu to update page tables, vm update fences are unused.\nInstall stub fence into these fence pointers instead of NULL\nto avoid NULL dereference when calling dma_fence_wait() on them.","publishedAt":"2025-09-15T14:46:18.349Z","updatedAt":"2026-05-11T19:41:06.562Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"d38ceaf99ed015f2a0b9af3499791bd3a3daae21","status":"affected","lessThan":"78b25110eb8c6990f7f5096bc0136c12a2b4cc99","versionType":"git"},{"version":"d38ceaf99ed015f2a0b9af3499791bd3a3daae21","status":"affected","lessThan":"aa9e9ba5748c524eb0925a2ef6984b78793646d6","versionType":"git"},{"version":"d38ceaf99ed015f2a0b9af3499791bd3a3daae21","status":"affected","lessThan":"187916e6ed9d0c3b3abc27429f7a5f8c936bd1f0","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.2","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.2","versionType":"semver"},{"version":"6.1.47","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.12","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c"]}],"references":["https://git.kernel.org/stable/c/78b25110eb8c6990f7f5096bc0136c12a2b4cc99","https://git.kernel.org/stable/c/aa9e9ba5748c524eb0925a2ef6984b78793646d6","https://git.kernel.org/stable/c/187916e6ed9d0c3b3abc27429f7a5f8c936bd1f0"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/53xxx/CVE-2023-53248.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-53248","state":"PUBLISHED","datePublished":"2025-09-15T14:46:18.349Z","dateUpdated":"2026-05-11T19:41:06.562Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-09-15T14:19:21.849Z"},"containers":{"cna":{"title":"drm/amdgpu: install stub fence into potential unused fence pointers","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: install stub fence into potential unused fence pointers\n\nWhen using cpu to update page tables, vm update fences are unused.\nInstall stub fence into these fence pointers instead of NULL\nto avoid NULL dereference when calling dma_fence_wait() on them."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"d38ceaf99ed015f2a0b9af3499791bd3a3daae21","status":"affected","lessThan":"78b25110eb8c6990f7f5096bc0136c12a2b4cc99","versionType":"git"},{"version":"d38ceaf99ed015f2a0b9af3499791bd3a3daae21","status":"affected","lessThan":"aa9e9ba5748c524eb0925a2ef6984b78793646d6","versionType":"git"},{"version":"d38ceaf99ed015f2a0b9af3499791bd3a3daae21","status":"affected","lessThan":"187916e6ed9d0c3b3abc27429f7a5f8c936bd1f0","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.2","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.2","versionType":"semver"},{"version":"6.1.47","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.12","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/78b25110eb8c6990f7f5096bc0136c12a2b4cc99"},{"url":"https://git.kernel.org/stable/c/aa9e9ba5748c524eb0925a2ef6984b78793646d6"},{"url":"https://git.kernel.org/stable/c/187916e6ed9d0c3b3abc27429f7a5f8c936bd1f0"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:41:06.562Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"6.1.47"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"6.4.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"6.5"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-53248","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-14T17:59:31.418206Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","lang":"en","type":"CWE","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-14T18:02:51.678Z"}}]}}}