CVE-2023-53316

HIGH

Linux Kernel 5.10-5.10.188 - Use-After-Free in DP Component Unbind Operation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed, all the memory for those submodules has just been freed. Change the order of these operations to avoid the many use-after-free that otherwise happens in this code path. Patchwork: https://patchwork.freedesktop.org/patch/542166/

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 4.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (15)
Linux/Linux < 5.10
Linux/Linux 5.10
Linux/Linux 5.10.188 - 5.10.*
Linux/Linux 5.15.121 - 5.15.*
Linux/Linux 6.1.39 - 6.1.*
Linux/Linux 6.3.13 - 6.3.*
Linux/Linux 6.4.4 - 6.4.*
Linux/Linux 6.5
Linux/Linux c943b4948b5848fc0e07f875edbd35a973879e22 - 3c3f3d35f5e05c468b048eb42a4f8c62c6655692
Linux/Linux c943b4948b5848fc0e07f875edbd35a973879e22 - 4e9f1a2367aea7d61f6781213e25313cd983b0d7
... and 5 more
Published Sep 16, 2025
Tracked Since Feb 18, 2026