CVE-2023-54091 — Missing Release of Resource after Effective Lifetime in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated and never freed in this function.
It was found with the ast driver, but most drivers using generic fbdev
setup are probably affected.
This fixes the following kmemleak report:
backtrace:
[] drm_mode_duplicate+0x45/0x220 [drm]
[] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]
[] drm_client_modeset_probe+0x6bd/0xf50 [drm]
[] __drm_fb_helper_in…
Affected Packages4 packages
▶CVEListV5linux/linux1d42bbc8f7f9ce4d852692ef7aa336b133b0830a — d3009700f48602b557eade1f22c98b6bc20247e8+8
🔴Vulnerability Details
3OSV▶
CVE-2023-54091: In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and↗2025-12-24
GHSA▶
GHSA-h228-354g-ppq4: In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated an↗2025-12-24