Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-96jp-tz37-tqb8
Vulnerability ID VCID-96jp-tz37-tqb8
Aliases CVE-2023-52867
Summary kernel: drm/radeon: possible buffer overflow
Status Published
Exploitability 0.5
Weighted Severity 4.0
Risk 2.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
cvssv3 4.4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52867.json
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2023-52867
cvssv3.1 5.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc Track https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783
ssvc Track https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45
ssvc Track https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58
ssvc Track https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94
ssvc Track https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896
ssvc Track https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f
ssvc Track https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855
ssvc Track https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4
ssvc Track https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52867.json
https://api.first.org/data/v1/epss?cve=CVE-2023-52867
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
112d4b02d94bf9fa4f1d3376587878400dd74783 https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783
19534a7a225f1bf2da70a9a90d41d0215f8f6b45 https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45
2282670 https://bugzilla.redhat.com/show_bug.cgi?id=2282670
341e79f8aec6af6b0061b8171d77b085835c6a58 https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58
347f025a02b3a5d715a0b471fc3b1439c338ad94 https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94
7b063c93bece827fde237fae1c101bceeee4e896 https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896
caaa74541459c4c9e2c10046cf66ad2890483d0f https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f
d9b4fa249deaae1145d6fc2b64dae718e5c7a855 https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855
dd05484f99d16715a88eedfca363828ef9a4c2d4 https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4
ddc42881f170f1f518496f5a70447501335fc783 https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783
RHSA-2024:9315 https://access.redhat.com/errata/RHSA-2024:9315
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52867.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:50:12Z/ Found at https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783
Exploit Prediction Scoring System (EPSS)
Percentile 0.06846
EPSS Score 0.00025
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:47:20.586857+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52867.json 38.0.0