High 7.8Published Dec 8, 2025

CVE-2023-53819amdgpu: validate offset_in_bo of drm_amdgpu_gem_va

Updated under an hour ago (Oct 27, 2026, 1:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va This is motivated by OOB access in amdgpu_vm_update_range when offset_in_bo+map_size overflows. v2: keep the validations in amdgpu_vm_bo_map v3: add the validations to amdgpu_vm_bo_map/amdgpu_vm_bo_replace_map rather than to amdgpu_gem_va_ioctl

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9f7eb5367d0001536c361bd1400e14521f854ff1 before 82aace80cfaab778245bd2f9e31b67953725e4d0; from 9f7eb5367d0001536c361bd1400e14521f854ff1 before d83c337e654d58d3edd15a2ae76e87dc601c07d9; from 9f7eb5367d0001536c361bd1400e14521f854ff1 before 968e27fd037ec4732068820a9b9836eccc0e0a12; from 9f7eb5367d0001536c361bd1400e14521f854ff1 before 4300a47e4017c9febb60ffa7d39723eeaed00f2b; from 9f7eb5367d0001536c361bd1400e14521f854ff1 before b10db1d2137415e5e7f9706d96cfe77539c499d4; from 9f7eb5367d0001536c361bd1400e14521f854ff1 before f015aadc0d973047f49526a127e900c488d4e425; from 9f7eb5367d0001536c361bd1400e14521f854ff1 before bc6dbf34dc4fb639522f3e8e66ef05997c0441ee; 9f7eb5367d0001536c361bd1400e14521f854ff1 builds before 9f0bcf49e9895cb005d78b33a5eebfa11711b425	CNA record

References

References

https://git.kernel.org/stable/c/82aace80cfaab778245bd2f9e31b67953725e4d0
https://git.kernel.org/stable/c/d83c337e654d58d3edd15a2ae76e87dc601c07d9
https://git.kernel.org/stable/c/968e27fd037ec4732068820a9b9836eccc0e0a12
https://git.kernel.org/stable/c/4300a47e4017c9febb60ffa7d39723eeaed00f2b
https://git.kernel.org/stable/c/b10db1d2137415e5e7f9706d96cfe77539c499d4
https://git.kernel.org/stable/c/f015aadc0d973047f49526a127e900c488d4e425
https://git.kernel.org/stable/c/bc6dbf34dc4fb639522f3e8e66ef05997c0441ee
https://git.kernel.org/stable/c/9f0bcf49e9895cb005d78b33a5eebfa11711b425

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.