cbcvebase.
CVE-2023-53453
published 2025-10-01

CVE-2023-53453: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload radeon driver: unreferenced object 0xffff9f8608ede200 (size 512): comm "systemd-udevd", pid 326, jiffies 4294682822 (age 716.338s) hex dump (first 32 bytes): 00 00 00 00 c4 aa ec aa 14 ab 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] kmem_cache_alloc_trace+0x2f1/0x500 [] atom_parse+0x117/0x230 [radeon] [] radeon_atombios_init+0xab/0x170 [radeon] [] si_init+0x57/0x750 [radeon] [] radeon_device_init+0x559/0x9c0 [radeon] [] radeon_driver_load_kms+0xc1/0x1a0 [radeon] [] drm_dev_register+0xdd/0x1d0 [] radeon_pci_probe+0xbd/0x100 [radeon] [] pci_device_probe+0xe1/0x160 [] really_probe.part.0+0xc1/0x2c0 [] __driver_probe_device+0x96/0x130 [] driver_probe_device+0x24/0xf0 [] __driver_attach+0x77/0x190 [] bus_for_each_dev+0x7f/0xd0 [] driver_attach+0x1e/0x30 [] bus_add_driver+0x12c/0x1e0 iio was allocated in atom_index_iio() called by atom_parse(), but it doesn't got released when the dirver is shutdown. Fix this kmemleak by free it in radeon_atombios_fini().

Affected

21 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.20-1 (bookworm)linux 6.1.20-1 (bookworm)
linuxlinux——
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < cb109cedbba11c33473e6780c256d8442a9e4460cb109cedbba11c33473e6780c256d8442a9e4460
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < 9cdb96b55651c92fc949cfd54124406c3c912b6b9cdb96b55651c92fc949cfd54124406c3c912b6b
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < f9f55fc64928b5e30d78f861c5fc76db9e769ebbf9f55fc64928b5e30d78f861c5fc76db9e769ebb
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < ce9e9d3dcbb0d1551ffd1a7f16e7c051f3ba4140ce9e9d3dcbb0d1551ffd1a7f16e7c051f3ba4140
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < cda2f7efbc2d857220dad32e315a54565b285c1ccda2f7efbc2d857220dad32e315a54565b285c1c
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < 107b8b542bb9dab4cbdc3276c85fbdd7f6782313107b8b542bb9dab4cbdc3276c85fbdd7f6782313
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < e2791f2f4d1d804e45fa91b14295c326b64c65f1e2791f2f4d1d804e45fa91b14295c326b64c65f1
linuxlinux>= 771fe6b912fca54f03e8a72eb63058b582775362 < 4773fadedca918faec443daaca5e4ea1c0ced1444773fadedca918faec443daaca5e4ea1c0ced144
linuxlinux_kernel>= 0 < 5.10.178-15.10.178-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 2.6.31 < 4.14.3084.14.308
linuxlinux_kernel>= 4.15 < 4.19.2764.19.276
linuxlinux_kernel>= 4.20 < 5.4.2355.4.235
linuxlinux_kernel>= 5.11 < 5.15.995.15.99
linuxlinux_kernel>= 5.16 < 6.1.166.1.16
linuxlinux_kernel>= 5.5 < 5.10.1735.10.173
linuxlinux_kernel>= 6.2 < 6.2.36.2.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.