Exposed IOCTL with Insufficient Access Control in AMD products - CVE-2023-20598

Vulnerability identifier: #VU82434

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-20598

CWE-ID: CWE-782

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to insufficient access control in the IOCTL within the pdfwkrnl.sys driver. A local user can send a specially crafted IOCTL request and execute abitrary code on the system.

Radeon RX 5000 Series
Radeon RX 6000 Series
Radeon RX 7000 Series
Ryzen 7045 Series Processors with Radeon Graphics
Ryzen 7020 Series Processors with Radeon Graphics
Ryzen 7040 Series Processors with Radeon Graphics
Ryzen 7000 Series Processors with Radeon Graphics
Ryzen 6000 Series Processors with Radeon Graphics
Ryzen 7035 Series Processors with Radeon Graphics
Radeon PRO W5000 Series
Radeon PRO W6000 Series
Radeon PRO W7000 Series
AMD Software PRO Edition
AMD Software Adrenalin Edition
ThinkStation P3 Tower Workstation
ThinkStation P340 Workstation
ThinkStation P348 Workstation
ThinkStation P350 Workstation
ThinkStation P358 Workstation
ThinkStation P360 Ultra Workstation
ThinkStation P360 Workstation
ThinkStation P5 Workstation
ThinkStation P520 Workstation
ThinkStation P520c Workstation
ThinkStation P620 Workstation
ThinkStation P7 Intel Workstation
ThinkStation P720 Workstation
ThinkStation P920 Workstation
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 21H2), 11 (Version 21H2) - ThinkStation P348
AMD Discrete Graphics Driver for Windows 10 (Version 22H2) - ThinkStation P360
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 20H2, 21H1, 21H2) - ThinkStation P360
AMD Discrete Graphics Driver for Windows 10 (Version 21H2, 22H2), 11 (Version 21H2, 22H2, 23H2) - ThinkStation P3
AMD Discrete Graphics Driver for Windows 10 RS4 (64-bit) - ThinkStation P520, P520c, P720, P920
AMD Discrete Graphics Driver for Windows 10 (Version 20H2) - ThinkStation P920, P720, P520, P520c
AMD Discrete Graphics Driver for Windows 10 (Version 2004) - ThinkStation P520, P520c, P720, P920
AMD Discrete Graphic Driver for Windows 10 (Version 21H2), 11 (Version 21H2 or later) - ThinkStation P520, P520c, P720, P920
AMD Discrete Graphics Legacy Driver for Windows 10-64-bit (Version 1909) - ThinkStation P520, P520c, P720, P920
AMD Graphic Driver for WX3200 for Windows 10 (Version 22H2), 11 (Version 22H2 or Later) - ThinkStation P920, P720, P520, P520c
AMD Discrete Graphics Driver for Windows 10 (Version 21H2) - ThinkStation P340
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P350
AMD Discrete Graphics Driver for Windows 10 (Version 21H1), 11 (Version 21H2 or Later) - ThinkStation P350
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P348
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P348
AMD Discrete Graphics Driver for Windows 10 (Version 21H2) - ThinkStation P348
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P340
AMD Discrete VGA Driver for Windows 10 64-bit (Version 2004) - ThinkStation P340
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P340
AMD Discrete Driver for Windows 11 (Version 21H2), 10 (Version 21H2) - ThinkStation P358
AMD Discrete Graphics Driver for Windows 11 (Version 22H2 or Later), 10 (Version 22H2) - ThinkStation P358
AMD Discrete Graphics Driver For W6400 for Windows 10 (Version 21H2)- ThinkStation P360 Ultra
AMD Discrete VGA Driver for Windows 11 (Version 22H2) - ThinkStation P620
AMD Discrete Graphics Driver for W6400 for Windows 10 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra
AMD Discrete Graphics Driver for Windows 11 (Version 21H2), 10 (Version 21H2) - ThinkStation P360 Ultra
AMD Discrete Graphics Driver for Windows 10 IOT - ThinkStation P360 Ultra
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P5
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P7 Intel

Install updates from vendor's website.

AMD Software PRO Edition - update to 23.Q4
AMD Software Adrenalin Edition - update to 23.9.2
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 21H2), 11 (Version 21H2) - ThinkStation P348 - update to 30.0.14014.3001
AMD Discrete Graphics Driver for Windows 10 (Version 22H2) - ThinkStation P360 - update to 31.0.14037.18001
AMD Discrete Graphics Driver (Radeon W6400) for Windows 10 (Version 20H2, 21H1, 21H2) - ThinkStation P360 - update to 31.0.14037.18001
AMD Discrete Graphics Driver for Windows 10 (Version 21H2, 22H2), 11 (Version 21H2, 22H2, 23H2) - ThinkStation P3 - update to 31.0.14037.18001
AMD Discrete Graphics Driver for Windows 10 RS4 (64-bit) - ThinkStation P520, P520c, P720, P920 - update to 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 10 (Version 20H2) - ThinkStation P920, P720, P520, P520c - update to 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 10 (Version 2004) - ThinkStation P520, P520c, P720, P920 - update to 31.0.21912.14 FOR WX3200
AMD Discrete Graphic Driver for Windows 10 (Version 21H2), 11 (Version 21H2 or later) - ThinkStation P520, P520c, P720, P920 - update to 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Legacy Driver for Windows 10-64-bit (Version 1909) - ThinkStation P520, P520c, P720, P920 - update to 31.0.21912.14 FOR WX3200
AMD Graphic Driver for WX3200 for Windows 10 (Version 22H2), 11 (Version 22H2 or Later) - ThinkStation P920, P720, P520, P520c - update to 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 10 (Version 21H2) - ThinkStation P340 - update to 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P350 - update to 31.0.21916.4001
AMD Discrete Graphics Driver for Windows 10 (Version 21H1), 11 (Version 21H2 or Later) - ThinkStation P350 - update to 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P348 - update to 31.0.21916.4001
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P348 - update to 31.0.21916.4001
AMD Discrete Graphics Driver for Windows 10 (Version 21H2) - ThinkStation P348 - update to 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 20H2) - ThinkStation P340 - update to 31.0.21916.4001
AMD Discrete VGA Driver for Windows 10 64-bit (Version 2004) - ThinkStation P340 - update to 31.0.21916.4001
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P340 - update to 31.0.21916.4001
AMD Discrete Driver for Windows 11 (Version 21H2), 10 (Version 21H2) - ThinkStation P358 - update to 31.0.24026.3002
AMD Discrete Graphics Driver for Windows 11 (Version 22H2 or Later), 10 (Version 22H2) - ThinkStation P358 - update to 31.0.24026.3002
AMD Discrete Graphics Driver For W6400 for Windows 10 (Version 21H2)- ThinkStation P360 Ultra - update to 31.0.24026.3002
AMD Discrete VGA Driver for Windows 11 (Version 22H2) - ThinkStation P620 - update to 31.0.24026.3002
AMD Discrete Graphics Driver for W6400 for Windows 10 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra - update to 31.0.24026.3002 FOR W6400 AND 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 11 (Version 21H2), 10 (Version 21H2) - ThinkStation P360 Ultra - update to 31.0.24026.3002 FOR W6400 AND 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 10 IOT - ThinkStation P360 Ultra - update to 31.0.24026.3002 FOR W6400 AND 31.0.21912.14 FOR WX3200
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P5 - update to 32.0.11002.41
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P7 Intel - update to 32.0.11002.41

• Exploit #10259 - CVE-2023-20598-PDFWKRNL (CVE-2023-20598 Kernel Driver - Elevation of Privilege) (July 26, 2024)

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009
• https://jvn.jp/en/vu/JVNVU97149791/index.html

• Code execution in AMD Radeon Software
• Lenovo update for AMD Radeon Graphics Kernel driver