CVE-2023-53316
published 2025-09-16CVE-2023-53316: In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: Free resources after unregistering them
The DP component's unbind operation walks through the submodules to
unregister and clean things up. But if the unbind happens because the DP
controller itself is being removed, all the memory for those submodules
has just been freed.
Change the order of these operations to avoid the many use-after-free
that otherwise happens in this code path.
Patchwork: https://patchwork.freedesktop.org/patch/542166/
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c943b4948b5848fc0e07f875edbd35a973879e22 < c67a55f7cc8d767d624235bf1bcd0947e56abe0f | c67a55f7cc8d767d624235bf1bcd0947e56abe0f |
| linux | linux | >= c943b4948b5848fc0e07f875edbd35a973879e22 < 3c3f3d35f5e05c468b048eb42a4f8c62c6655692 | 3c3f3d35f5e05c468b048eb42a4f8c62c6655692 |
| linux | linux | >= c943b4948b5848fc0e07f875edbd35a973879e22 < 4e9f1a2367aea7d61f6781213e25313cd983b0d7 | 4e9f1a2367aea7d61f6781213e25313cd983b0d7 |
| linux | linux | >= c943b4948b5848fc0e07f875edbd35a973879e22 < 5c3278db06e332fdc14f3f297499fb88ded264d2 | 5c3278db06e332fdc14f3f297499fb88ded264d2 |
| linux | linux | >= c943b4948b5848fc0e07f875edbd35a973879e22 < ca47d0dc00968358c136a1847cfed550cedfd1b5 | ca47d0dc00968358c136a1847cfed550cedfd1b5 |
| linux | linux | >= c943b4948b5848fc0e07f875edbd35a973879e22 < fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8 | fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 5.10 < 5.10.188 | 5.10.188 |
| linux | linux_kernel | >= 5.11 < 5.15.121 | 5.15.121 |
| linux | linux_kernel | >= 5.16 < 6.1.39 | 6.1.39 |
| linux | linux_kernel | >= 6.2 < 6.3.13 | 6.3.13 |
| linux | linux_kernel | >= 6.4 < 6.4.4 | 6.4.4 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: drm/msm/dp: Free resources after unregistering them
vendor_redhat·2025-09-16·CVSS 7.8
CVE-2023-53316 [HIGH] kernel: drm/msm/dp: Free resources after unregistering them
kernel: drm/msm/dp: Free resources after unregistering them
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: Free resources after unregistering them
The DP component's unbind operation walks through the submodules to
unregister and clean things up. But if the unbind happens because the DP
controller itself is being removed, all the memory for those submodules
has just been freed.
Change the order of these operations to avoid the many use-after-free
that otherwise happens in this code path.
Patchwork: https://patchwork.freedesktop.org/patch/542166/
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat E
Debian
CVE-2023-53316: linux - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp:...
vendor_debian·2023·CVSS 7.8
CVE-2023-53316 [HIGH] CVE-2023-53316: linux - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp:...
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed, all the memory for those submodules has just been freed. Change the order of these operations to avoid the many use-after-free that otherwise happens in this code path. Patchwork: https://patchwork.freedesktop.org/patch/542166/
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.4.4-1)
sid: resolved (fixed in 6.4.4-1)
trixie: resolved (fixed in 6.4.4-1)
GHSA
GHSA-hph3-9q45-4pf2: In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: Free resources after unregistering them
The DP component's unbind op
ghsa_unreviewed·2025-09-16
CVE-2023-53316 [HIGH] CWE-416 GHSA-hph3-9q45-4pf2: In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: Free resources after unregistering them
The DP component's unbind op
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dp: Free resources after unregistering them
The DP component's unbind operation walks through the submodules to
unregister and clean things up. But if the unbind happens because the DP
controller itself is being removed, all the memory for those submodules
has just been freed.
Change the order of these operations to avoid the many use-after-free
that otherwise happens in this code path.
Patchwork: https://patchwork.freedesktop.org/patch/542166/
OSV
CVE-2023-53316: In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind oper
osv·2025-09-16·CVSS 7.8
CVE-2023-53316 [HIGH] CVE-2023-53316: In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind oper
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed, all the memory for those submodules has just been freed. Change the order of these operations to avoid the many use-after-free that otherwise happens in this code path. Patchwork: https://patchwork.freedesktop.org/patch/542166/
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/3c3f3d35f5e05c468b048eb42a4f8c62c6655692https://git.kernel.org/stable/c/4e9f1a2367aea7d61f6781213e25313cd983b0d7https://git.kernel.org/stable/c/5c3278db06e332fdc14f3f297499fb88ded264d2https://git.kernel.org/stable/c/c67a55f7cc8d767d624235bf1bcd0947e56abe0fhttps://git.kernel.org/stable/c/ca47d0dc00968358c136a1847cfed550cedfd1b5https://git.kernel.org/stable/c/fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8
2025-09-16
Published