What is CVE-2023-20598?
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.
The record classifies CVE-2023-20598 under weakness class CWE-269. Its CVSS v3 base vector states that the flaw requires local access to the host, needs low-privilege credentials, needs no user interaction, and has high impact on confidentiality, integrity, availability. 12 affected-product entries are recorded, across 1 vendor, listed below. The identifier was first published 1084 days ago.
Severity and exploitation probability
- CVSS v3.1 base score
- 7.8 — HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS (FIRST)
- 0.4% probability of exploitation in the next 30 days, higher than 37.3% of all scored CVEs
- CISA KEV
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Threadlinqs priority
- 7.4/10 — a Threadlinqs composite of the CVSS base score, the EPSS percentile and public exploit availability
- Published
- 2023-10-17, last modified 2024-08-02
Is CVE-2023-20598 being exploited?
Weaponised exploit code for CVE-2023-20598 is publicly available. 2 public proof-of-concept repositories are tracked for this identifier.
- H4rk3nz0/CVE-2023-20598-PDFWKRNL (github)
- trickest/cve (trickest)
Affected products and versions
- AMD: Radeon™ RX 5000 Series Graphics Cards, Radeon™ RX 6000 Series Graphics Cards, Radeon™ RX 7000 Series Graphics Cards, Radeon™ PRO W5000 Series Graphics Cards, Radeon™ PRO W6000 Series Graphics Cards, Radeon™ PRO W7000 Series Graphics Cards, Ryzen™ 7045 Series Processors with Radeon™ Graphics, Ryzen™ 7020 Series Processors with Radeon™ Graphics, Ryzen™ 7040 Series Processors with Radeon™ Graphics, Ryzen™ 7000 Series Processors with Radeon™ Graphics, Ryzen™ 6000 Series Processors with Radeon™ Graphics, Ryzen™ 7035 Series Processors with Radeon™ Graphics
How to fix CVE-2023-20598
Vendor advisory: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009. Apply the vendor fix referenced above to every affected product listed in this record, then confirm the running version against the vendor advisory.
Threat activity tracking CVE-2023-20598
1 tracked threat in the Threadlinqs corpus references CVE-2023-20598, either in the campaign’s CVE list or as an indicator on the campaign record.
Sources
Enriched from CVE.org, NVD, FIRST EPSS, GitHub Security Advisories, public proof-of-concept repositories. Last verified by Threadlinqs on . This product uses the NVD API but is not endorsed or certified by the NVD.