CVE-2023-20598

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-20598
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009 Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
OR cpe:2.3:h:amd:radeon_rx_5300:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5300_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5300m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5500_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5500m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5600_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5700_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5700m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6750_gre_10gb:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6750_gre_12gb:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600m_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7700_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7700s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7800_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900_gre:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900_xtx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900m:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
OR cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w7500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w7600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w7800:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w7900:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
OR cpe:2.3:h:amd:ryzen_3_7320u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_7440u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7500f:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7520u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7540u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7600x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7640h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7640u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_7645hx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_7640hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_7645:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_6800u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7700x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7745hx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7840h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_7840u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_pro_7745:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_pro_7840hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_6900hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_6900hx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7845hx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7900:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7900x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7940h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7945hx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7945hx3d:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7950x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_pro_7940hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_pro_7945:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:41

Type Values Removed Values Added
References () https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009 - Vendor Advisory () https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009 - Vendor Advisory

03 Jul 2024, 01:39

Type Values Removed Values Added
New CVE
Information

Published : 2023-10-17 14:15

Updated : 2024-11-21 07:41

NVD link : CVE-2023-20598

Mitre link : CVE-2023-20598

CVE.ORG link : CVE-2023-20598

JSON object : View

Products Affected

amd

  • radeon_rx_6600m
  • ryzen_5_7535u
  • radeon_rx_7600
  • radeon_rx_7900m
  • ryzen_5_7645hx
  • radeon_rx_6500_xt
  • ryzen_5_7640u
  • ryzen_9_7945hx
  • ryzen_9_6980hs
  • radeon_pro_w6400
  • radeon_rx_6750_gre_12gb
  • radeon_rx_5600
  • ryzen_7_7700
  • radeon_rx_5300
  • radeon_rx_6400
  • ryzen_3_7320u
  • radeon_rx_7600m
  • radeon_rx_7600m_xt
  • ryzen_5_6600u
  • ryzen_9_7945hx3d
  • ryzen_7_7800x3d
  • ryzen_5_7500f
  • ryzen_5_6600h
  • ryzen_5_7600
  • radeon_rx_6800_xt
  • ryzen_7_7736u
  • ryzen_9_7900x3d
  • radeon_pro_w7600
  • ryzen_7_6800u
  • radeon_rx_5700_xt
  • ryzen_9_7950x
  • ryzen_5_7535hs
  • radeon_rx_6700
  • ryzen_9_6900hs
  • ryzen_7_7840h
  • radeon_rx_7700_xt
  • ryzen_7_6800h
  • radeon_rx_5500_xt
  • ryzen_7_6800hs
  • radeon_rx_6750_gre_10gb
  • ryzen_3_7440u
  • ryzen_7_7735u
  • radeon_rx_5300m
  • ryzen_7_7840u
  • ryzen_7_7735hs
  • radeon_rx_6650m
  • radeon_pro_w7900
  • radeon_rx_6300m
  • ryzen_9_pro_7945
  • radeon_pro_w6800
  • radeon_rx_6800
  • radeon_rx_7900_gre
  • ryzen_5_7540u
  • radeon_rx_6700s
  • radeon_pro_w5500
  • ryzen_9_7950x3d
  • ryzen_7_7745hx
  • radeon_rx_6600s
  • radeon_rx_6900_xt
  • radeon_rx_7900_xtx
  • radeon_pro_w5700
  • radeon_rx_5500
  • ryzen_5_pro_7645
  • ryzen_9_6900hx
  • ryzen_9_7845hx
  • radeon_software
  • ryzen_9_7940h
  • radeon_rx_7800_xt
  • radeon_pro_w6600
  • radeon_rx_6650_xt
  • radeon_rx_7900_xt
  • radeon_pro_w7800
  • radeon_rx_5500m
  • radeon_rx_6450m
  • ryzen_7_pro_7745
  • radeon_rx_6500m
  • radeon_rx_6600_xt
  • ryzen_5_pro_7640hs
  • radeon_rx_6700m
  • ryzen_9_7900
  • ryzen_5_7640h
  • radeon_rx_5600m
  • ryzen_9_pro_7940hs
  • radeon_rx_5700m
  • radeon_rx_5700
  • ryzen_9_7900x
  • radeon_rx_6600
  • ryzen_9_6980hx
  • radeon_rx_6750_xt
  • radeon_rx_6550m
  • ryzen_7_7700x
  • radeon_rx_7600s
  • radeon_rx_6550s
  • ryzen_7_pro_7840hs
  • radeon_pro_w6300
  • ryzen_3_7335u
  • radeon_rx_6650m_xt
  • ryzen_5_7520u
  • radeon_rx_6700_xt
  • ryzen_5_6600hs
  • radeon_rx_6800s
  • ryzen_5_7600x
  • radeon_rx_6950_xt
  • radeon_rx_5600_xt
  • radeon_rx_5300_xt
  • radeon_rx_7700s
  • radeon_pro_w7500
CWE
NVD-CWE-noinfo CWE-269

Improper Privilege Management