CVE-2023-53562

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/544711591a67a6da4d9f0f70ba3c805eb2548729	Patch
https://git.kernel.org/stable/c/60d476af96015891c7959f30838ae7a9749932bf	Patch
https://git.kernel.org/stable/c/c02e8c1c5b3eb0b6193946194ac280f58f48b3b5	Patch
https://git.kernel.org/stable/c/e3401e07ba98a94b978164b7e873c25e5fc82b4b	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:5.11:-::::::
	cpe:2.3:o:linux:linux_kernel:5.11:rc3::::::
	cpe:2.3:o:linux:linux_kernel:5.11:rc4::::::
	cpe:2.3:o:linux:linux_kernel:5.11:rc5::::::
	cpe:2.3:o:linux:linux_kernel:5.11:rc6::::::
	cpe:2.3:o:linux:linux_kernel:5.11:rc7::::::

History

No history.

Information

Published : 2025-10-04 16:15

Updated : 2026-03-21 00:39

NVD link : CVE-2023-53562

Mitre link : CVE-2023-53562

CVE.ORG link : CVE-2023-53562

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

{"id": "CVE-2023-53562", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2025-10-04T16:15:51.643", "references": [{"url": "https://git.kernel.org/stable/c/544711591a67a6da4d9f0f70ba3c805eb2548729", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/60d476af96015891c7959f30838ae7a9749932bf", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c02e8c1c5b3eb0b6193946194ac280f58f48b3b5", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e3401e07ba98a94b978164b7e873c25e5fc82b4b", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: fix vram leak on bind errors\n\nMake sure to release the VRAM buffer also in a case a subcomponent fails\nto bind.\n\nPatchwork: https://patchwork.freedesktop.org/patch/525094/"}], "lastModified": "2026-03-21T00:39:20.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A3FDCC7-743B-4C07-97D4-7004EC75E052", "versionEndExcluding": "4.20", "versionStartIncluding": "4.19.169"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FDC12D0-2C56-4F4C-9EBF-45DCF5316E5D", "versionEndExcluding": "5.5", "versionStartIncluding": "5.4.91"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE6534D6-1E44-4B92-AC22-ADB9B95AFB65", "versionEndExcluding": "5.11", "versionStartIncluding": "5.10.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D1C64CB-C56F-4238-9B3E-271163676D2A", "versionEndExcluding": "6.1.29", "versionStartIncluding": "5.11.1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F92F7C8E-A977-4255-B1B6-D1908D8B408F", "versionEndExcluding": "6.2.16", "versionStartIncluding": "6.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D96A7FC-D812-4458-AEA8-3FF4023E6B75", "versionEndExcluding": "6.3.3", "versionStartIncluding": "6.3"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AD3510E-E8FA-47F3-9AD5-D8EA4A2719D1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18C82C96-2853-4DFE-93AD-F6E59B4129CA"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A330B043-47EA-4D06-82BF-153A1735FC11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0EE963C-B36C-4143-96A9-65BCA7D8F2EF"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B511E2F6-2917-4797-8909-8F7EA4870C7B"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.11:rc7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9FA9D80-C790-41EA-8A21-DF7B170465E0"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}