---
id: CVE-2023-53009
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdkfd: Add sync after creating vram bo

  There will be data corruption on vram allocated by svm
  if the initialization is not complete and application is
  writting on…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdkfd: Add sync after creating vram bo

  There will be data corruption on vram allocated by svm
  if the initialization is not complete and application is
  writting on…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-820
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.14, < 6.1.9'
  - linux_kernel = 6.2
patched:
  - linux_kernel 6.1.9
published: '2025-03-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:35.647'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53009'
references:
  - url: 'https://git.kernel.org/stable/c/92af2d3b57a1afdfdcafb1c6a07ffd89cf3e98fb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ba029e9991d9be90a28b6a0ceb25e9a6fb348829'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53009.json
  - url: 'https://access.redhat.com/security/cve/CVE-2023-53009'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2355526'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2023-53009'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53009'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2025032714-CVE-2023-53009-82cd@gregkh/T
  - url: 'https://access.redhat.com/errata/RHSA-2023:7077'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
  - score-dispute
epss: 0.00183
epssPercentile: 0.0784
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:33:08.670432Z'
scores:
  nvd: 7.8
  vendor: 3.3
  cna: 7.8
ingestedAt: '2026-10-15T22:48:25.386Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Add sync after creating vram bo

There will be data corruption on vram allocated by svm
if the initialization is not complete and application is
writting on the memory. Adding sync to wait for the
initialization completion is to resolve this issue.

## Affected

- `linux_kernel >= 5.14, < 6.1.9`
- `linux_kernel = 6.2`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.1.9`

## Vendor advisories

- **RHSA-2023:7077** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat CodeReady Linux Builder (v. 8) · released 2023-11-14 · [advisory](https://access.redhat.com/errata/RHSA-2023:7077)
- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53009.json)