CVE-2023-52585: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
Vulnerability summary
CVE-2023-52585 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 19.1% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 19 · Related 16Timeline
- 06-03-2024PublishedVulnerability first disclosed.
- 15-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() Return invalid error code -EINVAL for invalid block id. Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c:1183 amdgpu_ras_query_error_status_helper() error: we previously assumed 'info' could be null (see line 1176)
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
Decrease -0.01 pp
From 0.28% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu117 products
- linuxAll versions (No fix recorded) | < 5.4.0-192.212 | < 5.15.0-118.128
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1130.140 | < 5.15.0-1067.73
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Netapp3 products
Debian2 products
- linux< 6.1.94-1 | < 6.7.7-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ 8cc0f5669eb6d4f156c721956da67560c9319317, < 195a6289282e039024ad30ba66e6f94a4d0fbe49 | ≥ 8cc0f5669eb6d4f156c721956da67560c9319317, < b8d55a90fd55b767c25687747e2b24abd1ef8680 | 6.7
- linux_kernel< 6.7.4 | ≥ 5.4, < 5.4.277 | ≥ 5.5, < 5.10.218 | ≥ 5.11, < 5.15.160 | ≥ 5.16, < 6.1.92 | ≥ 6.2, < 6.6.32 | ≥ 6.7, < 6.7.4
4 vendors · 124 products
References
27 links- security.netapp.com/advisory/ntap-20240912-0009/Mailing List