CVE-2023-53378 — Linux vulnerability

5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 18

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Currently i915_gem_object_is_framebuffer() doesn't treat the BO containing the framebuffer's DPT as a framebuffer itself. This means eg. that the shrinker can evict the DPT BO while leaving the actual FB BO bound, when the DPT is allocated from regular shmem. That causes an immediate oops during hibernate as we try to rewrite the PTEs inside the already evicted DPT obj. TODO: p…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel6.0 — 6.1.23+2
▶Debianlinux/linux_kernel< 6.1.25-1+2
▶CVEListV5linux/linux0dc987b699ce4266450d407d6d79d41eab88c5d0 — c781c107731fc09ce4330c8c636b8446d0f72aa4+3
▶debiandebian/linux< linux 6.1.25-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53378: In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Currently i915_gem_object_is_frame↗2025-09-18
▶
GHSA
GHSA-53wx-c6fx-gwfp: In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Currently i915_gem_object_is_fra↗2025-09-18
▶

📋Vendor Advisories

2
Red Hat
kernel: drm/i915/dpt: Treat the DPT BO as a framebuffer↗2025-09-18
▶
Debian
CVE-2023-53378: linux - In the Linux kernel, the following vulnerability has been resolved: drm/i915/dp...↗2023
▶
CVE-2023-53378 — Linux vulnerability | cvebase