# CVE-2023-20511: AMD kernel mode driver double free in pointer release

Source: https://junglewise.ai/threats/cve-2023-20511-amd-kernel-mode-driver-double-free-in-pointer-release  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-31. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2023-20511 · Severity: medium · CVSS 6.4 · Published 2026-08-31

AMD's kernel mode driver, which manages GPU and video processing hardware, contains a flaw that allows a privileged attacker to trigger a double free condition—releasing the same memory location twice. This can lead to arbitrary code execution, giving an attacker complete control over the system. While this requires administrator-level access to exploit, the potential for system compromise makes it a significant security concern.

Vendors: [Amd](https://junglewise.ai/threats/vendors/amd).

## Quick answers

**Is CVE-2023-20511 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2023-20511 being exploited in the wild.

**How severe is CVE-2023-20511?** Medium severity, with a CVSS score of 6.4, published 31 August 2026.

**Which products and versions are affected?** AMD kernel mode driver.

**Is there a fix for CVE-2023-20511?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2023-20511 attacked?** It is attacked with local access.

**Am I affected by CVE-2023-20511?** Check whether you run Amd Kernel Mode Driver. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a double free condition in AMD's kernel mode driver (KMD), triggered by improper pointer release logic. An invalid pointer is released, allowing an attacker with elevated privileges to craft input that causes the same memory region to be freed twice. This memory corruption can be leveraged to execute arbitrary code in kernel context. Exploitation requires privileged access to the system. No patch timeline or version information is currently available in the advisory.

## Affected products

- AMD kernel mode driver

## Timeline

- 2026-08-31: disclosed

## References

- [https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html](https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html)