CVE - CVE-2023-52691

CVE-ID
CVE-2023-52691	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free some fields of adev. However, when the control flow returns to si_dpm_sw_init, it goes to label dpm_failed and calls si_dpm_fini, which calls amdgpu_free_extended_power_table again and free those fields again. Thus a double-free is triggered.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/06d95c99d5a4f5accdb79464076efe62e668c706 URL:https://git.kernel.org/stable/c/06d95c99d5a4f5accdb79464076efe62e668c706 MISC:https://git.kernel.org/stable/c/2bf47c89bbaca2bae16581ef1b28aaec0ade0334 URL:https://git.kernel.org/stable/c/2bf47c89bbaca2bae16581ef1b28aaec0ade0334 MISC:https://git.kernel.org/stable/c/ac16667237a82e2597e329eb9bc520d1cf9dff30 URL:https://git.kernel.org/stable/c/ac16667237a82e2597e329eb9bc520d1cf9dff30 MISC:https://git.kernel.org/stable/c/aeed2b4e4a70c7568d4a5eecd6a109713c0dfbf4 URL:https://git.kernel.org/stable/c/aeed2b4e4a70c7568d4a5eecd6a109713c0dfbf4 MISC:https://git.kernel.org/stable/c/afe9f5b871f86d58ecdc45b217b662227d7890d0 URL:https://git.kernel.org/stable/c/afe9f5b871f86d58ecdc45b217b662227d7890d0 MISC:https://git.kernel.org/stable/c/ca8e2e251c65e5a712f6025e27bd9b26d16e6f4a URL:https://git.kernel.org/stable/c/ca8e2e251c65e5a712f6025e27bd9b26d16e6f4a MISC:https://git.kernel.org/stable/c/f957a1be647f7fc65926cbf572992ec2747a93f2 URL:https://git.kernel.org/stable/c/f957a1be647f7fc65926cbf572992ec2747a93f2 MISC:https://git.kernel.org/stable/c/fb1936cb587262cd539e84b34541abb06e42b2f9 URL:https://git.kernel.org/stable/c/fb1936cb587262cd539e84b34541abb06e42b2f9 MLIST:[debian-lts-announce] 20240625 [SECURITY] [DLA 3841-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html MLIST:[debian-lts-announce] 20240627 [SECURITY] [DLA 3840-1] linux security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Assigning CNA
kernel.org
Date Record Created
20240307	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240307)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)