CVE-2023-20562

AMD / μProf PUBLISHED

Description (CNA)

Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.

Affected (CNA)

Vendor / product	Versions
AMD / μProf	affected various before 4.1.396
AMD / μProf	affected various before 4.1-424

CWE

No CWE identifiers supplied.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003

ADP enrichment

CVE

No English description supplied.

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003

CISA-ADP

No English description supplied.

No references supplied.