CVE-2023-52634

What it actually does

Incorrect FIFO enable/disable logic in AMD display driver causes HPO and DIG registers to be set simultaneously during HDMI mode switches, leading to system hangs on subsequent refresh rate changes when OTG/FIFO state is inconsistent.

Why it matters to the business

Affected systems may experience unexpected freezes during display configuration changes, disrupting operations on Linux desktops or servers with AMD graphics; low likelihood of exploitation but impacts stability for users performing mode switches.

How an attack unfolds

A local attacker triggers an HDMI mode switch or refresh rate change on affected AMD hardware, exploiting the register misconfiguration that leaves FIFO enabled incorrectly and causes a hang on the next change; no remote vector or known threat actor campaigns.

How to fix it

Update all listed packages to the provided fixed versions (e.g., rpm 0:4.14.3-14.el8_4.2 and matching versions for python3-rpm, rpm-build, rpm-libs, and all related debug/source packages). Reboot after applying kernel-adjacent updates and validate display stability.

How to confirm the fix worked

Confirm installed package versions match the fixed releases listed for each affected rpm component; test HDMI mode switches and refresh rate changes to ensure no hangs occur.

Typical attack path

1. Gain local access to an affected Linux system with AMD display hardware
2. Perform an HDMI mode switch or refresh rate change via display settings or application
3. Trigger simultaneous HPO/DIG register state that leaves FIFO enabled improperly
4. Initiate a follow-on refresh rate change to induce the system hang

How to detect it

Review system and kernel logs for entries around display driver operations or refresh rate changes coinciding with hangs; no persistent artifacts expected after a hang.

What your security team should do

• Apply the specified package updates to all affected systems without delay
• Prioritize systems with AMD graphics hardware used for frequent display changes
• Monitor system stability logs for display-related hangs until patches are deployed