Login Request a demo
Medium severity · published Jan 16, 2024
CVE-2023-4969
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures
6.5
CVSS
1.2%
EPSS
No
On KEV
Description
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DD
Ddk · Imaginationtech
through 23.2 · source: NVD
IM
Instinct Mi100 Firmware · Amd
All versions, or not specified · source: NVD
IM
Instinct Mi210 Firmware · Amd
All versions, or not specified · source: NVD
IM
Instinct Mi250 Firmware · Amd
All versions, or not specified · source: NVD
IM
Instinct Mi300a Firmware · Amd
All versions, or not specified · source: NVD
IM
Instinct Mi300x Firmware · Amd
All versions, or not specified · source: NVD
OP
Opencl · Khronos
through 3.0.11 · source: NVD
RI
Radeon Instinct Mi25 Firmware · Amd
All versions, or not specified · source: NVD
RI
Radeon Instinct Mi50 Firmware · Amd
All versions, or not specified · source: NVD
RP
Radeon Pro V520 Firmware · Amd
All versions, or not specified · source: NVD
RP
Radeon Pro V620 Firmware · Amd
All versions, or not specified · source: NVD
RP
Radeon Pro W5500x Firmware · Amd
All versions, or not specified · source: NVD
Affected product
IM
Instinct Mi100 Firmware
Amd
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-4969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-4969
Exploit
https://blog.trailofbits.com
Third Party Advisory
https://kb.cert.org/vuls/id/446598
Technical Description
https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions
Vendor Advisory
https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html
Third Party Advisory
https://www.kb.cert.org/vuls/id/446598