CVE-2023-53152 — Missing Release of Resource after Effective Lifetime in Linux

CWE-772 — Missing Release of Resource after Effective Lifetime6 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
LinuxLinux KernelDebian Linux+3 more
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini The following call trace is observed when removing the amdgpu driver, which is caused by that BOs allocated for psp are not freed until removing. [61811.450562] RIP: 0010:amddrm_buddy_fini.cold+0x29/0x47 [amddrm_buddy] [61811.450577] Call Trace: [61811.450577] [61811.450579] amdgpu_vram_mgr_fini+0x135/0x1c0 [amdgpu] [61811.450728] amdgpu_ttm_fini+0x207/0x290 [amdgpu] [618…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages7 packages

▶NVDlinux/linux_kernel4.12 — 6.1.47+1
▶Debianlinux/linux_kernel< 6.1.52-1+2
▶CVEListV5linux/linux0e5ca0d1ac07ef8b3a52d3b0404482207cb4da5a — ab6f446c220db0c131f2071846afd835799be0fb+3
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53152: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini The following call trace is↗2025-09-15
▶
GHSA
GHSA-c3cj-qmvm-36gx: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini The following call trace↗2025-09-15
▶

📋Vendor Advisories

3
Red Hat
kernel: drm/amdgpu: fix calltrace warning in amddrm_buddy_fini↗2025-09-15
▶
Microsoft
drm/amdgpu: fix calltrace warning in amddrm_buddy_fini↗2025-09-09
▶
Debian
CVE-2023-53152: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...↗2023
▶
CVE-2023-53152 — Linux vulnerability | cvebase