CVE-2023-53806

Vulnerability

Details

The vulnerability is in the Linux kernel's AMD Display driver (drm/amd/display). When changing the display resolution to 8K with extended mode enabled, the driver incorrectly populates subvp command information for both display pipes using a vblank counter. This results in an out-of-bounds array access, leading to a page fault and subsequent system restart [1].

Exploitation

Conditions

The issue triggers during a resolution change to 8K in extended mode. This can be initiated by any user with the ability to change display settings, requiring no special privileges beyond local access. No authentication or network attack surface is involved; it is a local denial-of-service condition.

Impact

A successful trigger of this vulnerability causes a system restart (kernel panic) due to a page fault, resulting in denial of service. No other impacts (e.g., privilege escalation or data corruption) have been reported.

Mitigation

The fix was included in the Linux kernel stable commit [1]. Users are advised to update to a kernel version containing this commit or a later stable release that includes the patch.