{"id":"CVE-2023-53009","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add sync after creating vram bo\n\nThere will be data corruption on vram allocated by svm\nif the initialization is not complete and application is\nwritting on…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add sync after creating vram bo\n\nThere will be data corruption on vram allocated by svm\nif the initialization is not complete and application is\nwritting on…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-820"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.14, < 6.1.9","linux_kernel = 6.2"],"patched":["linux_kernel 6.1.9"],"published":"2025-03-27","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:35.647","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-53009","references":[{"url":"https://git.kernel.org/stable/c/92af2d3b57a1afdfdcafb1c6a07ffd89cf3e98fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ba029e9991d9be90a28b6a0ceb25e9a6fb348829","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53009.json"},{"url":"https://access.redhat.com/security/cve/CVE-2023-53009"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355526"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53009"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53009"},{"url":"https://lore.kernel.org/linux-cve-announce/2025032714-CVE-2023-53009-82cd@gregkh/T"},{"url":"https://access.redhat.com/errata/RHSA-2023:7077"}],"tags":["nvd","csaf","vex","red-hat","cve.org","score-dispute"],"epss":0.00183,"epssPercentile":0.0784,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:33:08.670432Z"},"scores":{"nvd":7.8,"vendor":3.3,"cna":7.8},"ingestedAt":"2026-10-15T22:48:25.386Z","slug":"CVE-2023-53009","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add sync after creating vram bo\n\nThere will be data corruption on vram allocated by svm\nif the initialization is not complete and application is\nwritting on the memory. Adding sync to wait for the\ninitialization completion is to resolve this issue.\n\n## Affected\n\n- `linux_kernel >= 5.14, < 6.1.9`\n- `linux_kernel = 6.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.1.9`\n\n## Vendor advisories\n\n- **RHSA-2023:7077** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat CodeReady Linux Builder (v. 8) · released 2023-11-14 · [advisory](https://access.redhat.com/errata/RHSA-2023:7077)\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53009.json)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":230007,"id":"CVE-2023-53009","ts":1793124768584,"field":"cvss","old":"3.3","new":"7.8"},{"seq":230006,"id":"CVE-2023-53009","ts":1793124768584,"field":"severity","old":"low","new":"high"},{"seq":223749,"id":"CVE-2023-53009","ts":1792238387608,"field":"cvss","old":"7.8","new":"3.3"},{"seq":223748,"id":"CVE-2023-53009","ts":1792238387608,"field":"severity","old":"high","new":"low"}]}