CVE-2023-20598
No fix known EPSS <1%CVSS 7.8
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.
Products: AMD Radeon™ RX 5000 Series Graphics Cards, AMD Radeon™ RX 6000 Series Graphics Cards, AMD Radeon™ RX 7000 Series Graphics Cards, AMD Radeon™ PRO W5000 Series Graphics Cards, AMD Radeon™ PRO W6000 Series Graphics Cards, AMD Radeon™ PRO W7000 Series Graphics Cards, AMD Ryzen™ 7045 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics, amd ryzen_6000_series_processors_with_radeon_graphics, amd ryzen_7035_series_processors_with_radeon_graphics, amd radeon_rx_5300_xt, amd ryzen_5_7645hx, amd ryzen_9_pro_7945