Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2023-53036— drm/amdgpu: Fix call trace warning and hang when removing amdgpu device

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于amdgpu_vram_mgr_fini函数在设备移除时未正确处理内存释放，可能导致系统挂起。

AI Predicted 4.3 Difficulty: Moderate EPSS 0.20% · P9 Updated May 13, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1499 · Endpoint Denial of Service

Affected Version Matrix 8

Vendor	Product	Version Range	Status
Linux	Linux	`32f90e65251981f061eec883b0fe9e75d74e9665< f06b902511ea05526f405ee64da54a8313d91831`	affected
		`32f90e65251981f061eec883b0fe9e75d74e9665< 9a02dae3bbfe2df8e1c81e61a08695709e9588f9`	affected
		`32f90e65251981f061eec883b0fe9e75d74e9665< 93bb18d2a873d2fa9625c8ea927723660a868b95`	affected
		`5.18`	affected
		`< 5.18`	unaffected
		`6.1.22≤ 6.1.*`	unaffected
		`6.2.9≤ 6.2.*`	unaffected
		`6.3≤ *`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-53036

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

drm/amdgpu: Fix call trace warning and hang when removing amdgpu device

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix call trace warning and hang when removing amdgpu device On GPUs with RAS enabled, below call trace and hang are observed when shutting down device. v2: use DRM device unplugged flag instead of shutdown flag as the check to prevent memory wipe in shutdown stage. [ +0.000000] RIP: 0010:amdgpu_vram_mgr_fini+0x18d/0x1c0 [amdgpu] [ +0.000001] PKRU: 55555554 [ +0.000001] Call Trace: [ +0.000001] <TASK> [ +0.000002] amdgpu_ttm_fini+0x140/0x1c0 [amdgpu] [ +0.000183] amdgpu_bo_fini+0x27/0xa0 [amdgpu] [ +0.000184] gmc_v11_0_sw_fini+0x2b/0x40 [amdgpu] [ +0.000163] amdgpu_device_fini_sw+0xb6/0x510 [amdgpu] [ +0.000152] amdgpu_driver_release_kms+0x16/0x30 [amdgpu] [ +0.000090] drm_dev_release+0x28/0x50 [drm] [ +0.000016] devm_drm_dev_init_release+0x38/0x60 [drm] [ +0.000011] devm_action_release+0x15/0x20 [ +0.000003] release_nodes+0x40/0xc0 [ +0.000001] devres_release_all+0x9e/0xe0 [ +0.000001] device_unbind_cleanup+0x12/0x80 [ +0.000003] device_release_driver_internal+0xff/0x160 [ +0.000001] driver_detach+0x4a/0x90 [ +0.000001] bus_remove_driver+0x6c/0xf0 [ +0.000001] driver_unregister+0x31/0x50 [ +0.000001] pci_unregister_driver+0x40/0x90 [ +0.000003] amdgpu_exit+0x15/0x120 [amdgpu]

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	32f90e65251981f061eec883b0fe9e75d74e9665 ~ f06b902511ea05526f405ee64da54a8313d91831	-
Linux	Linux	5.18	-

II. Public POCs for CVE-2023-53036

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2023-53036

请登录查看更多情报信息。

Patches & Fixes for CVE-2023-53036 (3)

https://www.cve.org/CVERecord?id=CVE-2023-53036

Same Patch Batch · Linux · 2025-05-02 · 107 CVEs total

CVE-2023-53116	9.8 CRITICAL	nvmet: avoid potential UAF in nvmet_req_complete()
CVE-2023-53083	9.8 CRITICAL	nfsd: don't replace page in rq_pages if it's a continuation of last page
CVE-2023-53086	8.8 HIGH	wifi: mt76: connac: do not check WED status for non-mmio devices
CVE-2025-37798	7.8 HIGH	codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
CVE-2023-53138	7.8 HIGH	net: caif: Fix use-after-free in cfusbl_device_notify()
CVE-2023-53111	7.8 HIGH	loop: Fix use-after-free issues
CVE-2023-53107	7.8 HIGH	veth: Fix use after free in XDP_REDIRECT
CVE-2023-53102	7.8 HIGH	ice: xsk: disable txq irq before flushing hw
CVE-2023-53100	7.8 HIGH	ext4: fix WARNING in ext4_update_inline_data
CVE-2023-53094	7.8 HIGH	tty: serial: fsl_lpuart: fix race on RX DMA shutdown
CVE-2023-53090	7.8 HIGH	drm/amdkfd: Fix an illegal memory access
CVE-2023-53088	7.8 HIGH	mptcp: fix UaF in listener shutdown
CVE-2023-53087	7.8 HIGH	drm/i915/active: Fix misuse of non-idle barriers as fence trackers
CVE-2023-53084	7.8 HIGH	drm/shmem-helper: Remove another errant put in error path
CVE-2023-53080	7.8 HIGH	xsk: Add missing overflow check in xdp_umem_reg
CVE-2023-53072	7.8 HIGH	mptcp: use the workqueue to destroy unaccepted sockets
CVE-2023-53065	7.8 HIGH	perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
CVE-2023-53057	7.8 HIGH	Bluetooth: HCI: Fix global-out-of-bounds
CVE-2023-53052	7.8 HIGH	cifs: fix use-after-free bug in refresh_cache_worker()
CVE-2023-53047	7.8 HIGH	tee: amdtee: fix race condition in amdtee_open_session

Showing top 20 of 107 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux