cbcvebase.
CVE-2023-53263
published 2025-09-16

CVE-2023-53263: In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create We can't…

PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
4.4th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create We can't simply free the connector after calling drm_connector_init on it. We need to clean up the drm side first. It might not fix all regressions from commit 2b5d1c29f6c4 ("drm/nouveau/disp: PIOR DP uses GPIO for HPD, not PMGR AUX interrupts"), but at least it fixes a memory corruption in error handling related to that commit.

Affected

11 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.52-1 (bookworm)linux 6.1.52-1 (bookworm)
linuxlinux
linuxlinux>= 95983aea80038539ebc70e41e73e9bb4eabd1a92 < 3f27451c9f29d5ed00232968680c7838a44dcac73f27451c9f29d5ed00232968680c7838a44dcac7
linuxlinux>= 95983aea80038539ebc70e41e73e9bb4eabd1a92 < 872feeecd08c81d212a52211d212897b8a857544872feeecd08c81d212a52211d212897b8a857544
linuxlinux>= 95983aea80038539ebc70e41e73e9bb4eabd1a92 < 1b254b791d7b7dea6e8adc887fbbd51746d8bb271b254b791d7b7dea6e8adc887fbbd51746d8bb27
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.1.52-16.1.52-1
linuxlinux_kernel>= 0 < 6.4.13-16.4.13-1
linuxlinux_kernel>= 0 < 6.4.13-16.4.13-1
linuxlinux_kernel>= 6.0 < 6.1.476.1.47
linuxlinux_kernel>= 6.2 < 6.4.126.4.12

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.