Vulnerability identifier: #VU82434

Vulnerability risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-20598

CWE-ID: CWE-782

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Radeon RX 5000 Series
Hardware solutions / Firmware
Radeon RX 6000 Series
Hardware solutions / Firmware
Radeon RX 7000 Series
Hardware solutions / Firmware
Ryzen 7045 Series Processors with Radeon Graphics
Hardware solutions / Firmware
Ryzen 7020 Series Processors with Radeon Graphics
Hardware solutions / Firmware
Ryzen 7040 Series Processors with Radeon Graphics
Hardware solutions / Firmware
Ryzen 7000 Series Processors with Radeon Graphics
Hardware solutions / Firmware
Ryzen 6000 Series Processors with Radeon Graphics
Hardware solutions / Firmware
Ryzen 7035 Series Processors with Radeon Graphics
Hardware solutions / Firmware
Radeon PRO W5000 Series
Hardware solutions / Firmware
Radeon PRO W6000 Series
Hardware solutions / Firmware
Radeon PRO W7000 Series
Hardware solutions / Firmware
AMD Software Adrenalin Edition
Hardware solutions / Firmware
AMD Software PRO Edition
Hardware solutions / Firmware

Vendor: AMD

Description

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to insufficient access control in the IOCTL within the pdfwkrnl.sys driver. A local user can send a specially crafted IOCTL request and execute abitrary code on the system.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Radeon RX 5000 Series: All versions

Radeon RX 6000 Series: All versions

Radeon RX 7000 Series: All versions

Ryzen 7045 Series Processors with Radeon Graphics: All versions

Ryzen 7020 Series Processors with Radeon Graphics: All versions

Ryzen 7040 Series Processors with Radeon Graphics: All versions

Ryzen 7000 Series Processors with Radeon Graphics: All versions

Ryzen 6000 Series Processors with Radeon Graphics: All versions

Ryzen 7035 Series Processors with Radeon Graphics: All versions

Radeon PRO W5000 Series: All versions

Radeon PRO W6000 Series: All versions

Radeon PRO W7000 Series: All versions

---

External links
http://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009
http://jvn.jp/en/vu/JVNVU97149791/index.html

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.