CVE-2023-53009 drm/amdkfd: Add sync after creating vram bo
A race condition in the AMD KFD driver allows data corruption in VRAM if applications write before initialization completes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53009?
CVE-2023-53009 is a high-severity vulnerability in Linux kernel, published on 27 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Add sync after creating vram bo
There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync to wait for the initialization completion is to resolve this issue.
Which versions are affected by CVE-2023-53009?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53009?
Apply the vendor's patch.
Is CVE-2023-53009 being exploited?
There is no known exploitation of CVE-2023-53009 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-69476, BELL-CVE-2023-53009, DEBIAN-CVE-2023-53009, GHSA-w6fx-qwwp-5r54, ROOT-OS-UBUNTU-2204-CVE-2023-53009, UBUNTU-CVE-2023-53009.