CVE-2023-52485

CVE-2023-52485

Medium · published February 29, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Wake DMCUB before sending a command

[Why]

We can hang in place trying to send commands when the DMCUB isn't

powered on.

[How]

For functions that execute within a DC context or DC lock we can

wrap the direct calls to dm_execute_dmub_cmd/list with code that

exits idle power optimizations and reallows once we're done with

the command submission on success.

For DM direct submissions the DM will need to manage the enter/exit

sequencing manually.

We cannot invoke a DMCUB command directly within the DM execution

helper or we can deadlock.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.9th percentile
Published
2024-02-29T20:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.7.36.7.3
References (4)
EPSS history
Timeline
  • 29 FEB 14:57Z
    drm/amd/display: Wake DMCUB before sending a command
    cvelistv5