CVE-2023-20598 : An improper privilege management in the AMD Radeon™ Graphics driver may allow

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Published 2023-10-17 14:15:10

Updated 2024-07-03 01:39:19

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2023-20598

AMD » Radeon Software » PRO Edition
Versions before (<) 23.q4
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
Matching versions
When used together with: AMD » Radeon Pro W5500 » Version: N/A
When used together with: AMD » Radeon Pro W5700 » Version: N/A
When used together with: AMD » Radeon Pro W6300 » Version: N/A
When used together with: AMD » Radeon Pro W6400 » Version: N/A
When used together with: AMD » Radeon Pro W6600 » Version: N/A
When used together with: AMD » Radeon Pro W6800 » Version: N/A
When used together with: AMD » Radeon Pro W7500 » Version: N/A
When used together with: AMD » Radeon Pro W7600 » Version: N/A
When used together with: AMD » Radeon Pro W7800 » Version: N/A
When used together with: AMD » Radeon Pro W7900 » Version: N/A
AMD » Radeon Software » Adrenalin Edition
Versions before (<) 23.9.2
cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
Matching versions
When used together with: AMD » Radeon Rx 5300 » Version: N/A
When used together with: AMD » Radeon Rx 5300 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5300m » Version: N/A
When used together with: AMD » Radeon Rx 5500 » Version: N/A
When used together with: AMD » Radeon Rx 5500 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5500m » Version: N/A
When used together with: AMD » Radeon Rx 5600 » Version: N/A
When used together with: AMD » Radeon Rx 5600 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5600m » Version: N/A
When used together with: AMD » Radeon Rx 5700 » Version: N/A
When used together with: AMD » Radeon Rx 5700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5700m » Version: N/A
When used together with: AMD » Radeon Rx 6300m » Version: N/A
When used together with: AMD » Radeon Rx 6400 » Version: N/A
When used together with: AMD » Radeon Rx 6450m » Version: N/A
When used together with: AMD » Radeon Rx 6500 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6500m » Version: N/A
When used together with: AMD » Radeon Rx 6550m » Version: N/A
When used together with: AMD » Radeon Rx 6550s » Version: N/A
When used together with: AMD » Radeon Rx 6600 » Version: N/A
When used together with: AMD » Radeon Rx 6600 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6600m » Version: N/A
When used together with: AMD » Radeon Rx 6600s » Version: N/A
When used together with: AMD » Radeon Rx 6650 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6650m » Version: N/A
When used together with: AMD » Radeon Rx 6650m Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700 » Version: N/A
When used together with: AMD » Radeon Rx 6700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700m » Version: N/A
When used together with: AMD » Radeon Rx 6700s » Version: N/A
When used together with: AMD » Radeon Rx 6750 Gre 10gb » Version: N/A
When used together with: AMD » Radeon Rx 6750 Gre 12gb » Version: N/A
When used together with: AMD » Radeon Rx 6750 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6800 » Version: N/A
When used together with: AMD » Radeon Rx 6800 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6800s » Version: N/A
When used together with: AMD » Radeon Rx 6900 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6950 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7600 » Version: N/A
When used together with: AMD » Radeon Rx 7600m » Version: N/A
When used together with: AMD » Radeon Rx 7600m Xt » Version: N/A
When used together with: AMD » Radeon Rx 7600s » Version: N/A
When used together with: AMD » Radeon Rx 7700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7700s » Version: N/A
When used together with: AMD » Radeon Rx 7800 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7900 Gre » Version: N/A
When used together with: AMD » Radeon Rx 7900 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7900 Xtx » Version: N/A
When used together with: AMD » Radeon Rx 7900m » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-20598

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20598

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0	2024-07-03
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-20598

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

References for CVE-2023-20598

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009

AMD Radeon™ Graphics Kernel Driver Privilege Management Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2023-20598

Products affected by CVE-2023-20598

Exploit prediction scoring system (EPSS) score for CVE-2023-20598

CVSS scores for CVE-2023-20598

CWE ids for CVE-2023-20598

References for CVE-2023-20598