CVE-2023-53084

HIGH

Linux Kernel 5.9.5-5.10 - Use-After-Free in DRM Shmem Helper Error Path

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drm_gem_shmem_mmap() doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free.

References (5)

Core 5

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 5.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (17)
Linux/Linux < 5.10
Linux/Linux 4655afcf0e3874af03afff8c8704b52350bdba47
Linux/Linux 5.10
Linux/Linux 5.10.176 - 5.10.*
Linux/Linux 5.15.104 - 5.15.*
Linux/Linux 5.9.5 - 5.10
Linux/Linux 6.1.21 - 6.1.*
Linux/Linux 6.2.8 - 6.2.*
Linux/Linux 6.3
Linux/Linux f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a - 5cfb617967b05f8f27e862c97db1fabd8485f4db
... and 7 more
Published May 02, 2025
Tracked Since Feb 18, 2026