CVE-2023-54091
published 2025-12-24CVE-2023-54091: In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and never…
PriorityP420low5.5
EPSS
0.22%
13.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated and never freed in this function.
It was found with the ast driver, but most drivers using generic fbdev
setup are probably affected.
This fixes the following kmemleak report:
backtrace:
[] drm_mode_duplicate+0x45/0x220 [drm]
[] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]
[] drm_client_modeset_probe+0x6bd/0xf50 [drm]
[] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]
[] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]
[] drm_client_register+0x169/0x240 [drm]
[] ast_pci_probe+0x142/0x190 [ast]
[] local_pci_probe+0xdc/0x180
[] work_for_cpu_fn+0x4e/0xa0
[] process_one_work+0x8b7/0x1540
[] worker_thread+0x70a/0xed0
[] kthread+0x29f/0x340
[] ret_from_fork+0x1f/0x30
unreferenced object 0xff11000333089a00 (size 128):
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < d3009700f48602b557eade1f22c98b6bc20247e8 | d3009700f48602b557eade1f22c98b6bc20247e8 |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < a4b978249e8fa94956fce8b70a709f7797716f62 | a4b978249e8fa94956fce8b70a709f7797716f62 |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < 52daf6ba2e0d201640cb1ce42049c5c4426b4d6e | 52daf6ba2e0d201640cb1ce42049c5c4426b4d6e |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < 105275879a80503686a8108af2f5c579a1c5aef4 | 105275879a80503686a8108af2f5c579a1c5aef4 |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < a85e23a1ef63e45a18f0a30d7816fcb4a865ca95 | a85e23a1ef63e45a18f0a30d7816fcb4a865ca95 |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < b5359d7a5087ac398fc429da6833133b4784c268 | b5359d7a5087ac398fc429da6833133b4784c268 |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < 4b596a6e2d2e0f9c14e4122506dd715f43fcd727 | 4b596a6e2d2e0f9c14e4122506dd715f43fcd727 |
| linux | linux | >= 1d42bbc8f7f9ce4d852692ef7aa336b133b0830a < c2a88e8bdf5f6239948d75283d0ae7e0c7945b03 | c2a88e8bdf5f6239948d75283d0ae7e0c7945b03 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 2.6.35 < 4.14.322 | 4.14.322 |
| linux | linux_kernel | >= 4.15.0 < 4.19.291 | 4.19.291 |
| linux | linux_kernel | >= 4.20.0 < 5.4.251 | 5.4.251 |
| linux | linux_kernel | >= 5.11.0 < 5.15.123 | 5.15.123 |
| linux | linux_kernel | >= 5.16.0 < 6.1.42 | 6.1.42 |
| linux | linux_kernel | >= 5.5.0 < 5.10.188 | 5.10.188 |
| linux | linux_kernel | >= 6.2.0 < 6.4.7 | 6.4.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-54091: In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and
osv·2025-12-24
CVE-2023-54091 CVE-2023-54091: In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and
In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and never freed in this function. It was found with the ast driver, but most drivers using generic fbdev setup are probably affected. This fixes the following kmemleak report: backtrace: [] drm_mode_duplicate+0x45/0x220 [drm] [] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm] [] drm_client_modeset_probe+0x6bd/0xf50 [drm] [] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper] [] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper] [] drm_client_register+0x169/0x240 [drm] [] ast_pci_probe+0x142/0x190 [ast] [] local_pci_probe+0xdc/0x180 [] work_for_cpu_fn+0x4e/0xa0 [] process_one_work+0x8b7/0x1540 [] worker_thread+0x70a/0xe
OSV
drm/client: Fix memory leak in drm_client_target_cloned
osv·2025-12-24
CVE-2023-54091 drm/client: Fix memory leak in drm_client_target_cloned
drm/client: Fix memory leak in drm_client_target_cloned
In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated and never freed in this function.
It was found with the ast driver, but most drivers using generic fbdev
setup are probably affected.
This fixes the following kmemleak report:
backtrace:
[] drm_mode_duplicate+0x45/0x220 [drm]
[] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]
[] drm_client_modeset_probe+0x6bd/0xf50 [drm]
[] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]
[] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]
[] drm_client_register+0x169/0x240 [drm]
[] ast_pci_probe+0x142/0x190 [ast]
[] local_pci_probe+0xdc/0x180
[] work_for_cpu_fn+0x4e/0xa0
GHSA
GHSA-h228-354g-ppq4: In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated an
ghsa_unreviewed·2025-12-24
CVE-2023-54091 GHSA-h228-354g-ppq4: In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated an
In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated and never freed in this function.
It was found with the ast driver, but most drivers using generic fbdev
setup are probably affected.
This fixes the following kmemleak report:
backtrace:
[] drm_mode_duplicate+0x45/0x220 [drm]
[] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]
[] drm_client_modeset_probe+0x6bd/0xf50 [drm]
[] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]
[] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]
[] drm_client_register+0x169/0x240 [drm]
[] ast_pci_probe+0x142/0x190 [ast]
[] local_pci_probe+0xdc/0x180
[] work_for_cpu_fn+0x4e/0xa0
[] process_one_work+0x8b7/0x1540
[] worker_thread+0x70a/
Red Hat
kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2023-54091 [LOW] CWE-772 kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function
kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function
In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated and never freed in this function.
It was found with the ast driver, but most drivers using generic fbdev
setup are probably affected.
This fixes the following kmemleak report:
backtrace:
[] drm_mode_duplicate+0x45/0x220 [drm]
[] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]
[] drm_client_modeset_probe+0x6bd/0xf50 [drm]
[] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]
[] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]
[] drm_client_register+0x169/0x240 [drm]
[] ast_pci_probe+0x142/0x190 [ast]
[] local_pci_probe+0x
Debian
CVE-2023-54091: linux - In the Linux kernel, the following vulnerability has been resolved: drm/client:...
vendor_debian·2023
CVE-2023-54091 CVE-2023-54091: linux - In the Linux kernel, the following vulnerability has been resolved: drm/client:...
In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and never freed in this function. It was found with the ast driver, but most drivers using generic fbdev setup are probably affected. This fixes the following kmemleak report: backtrace: [] drm_mode_duplicate+0x45/0x220 [drm] [] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm] [] drm_client_modeset_probe+0x6bd/0xf50 [drm] [] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper] [] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper] [] drm_client_register+0x169/0x240 [drm] [] ast_pci_probe+0x142/0x190 [ast] [] local_pci_probe+0xdc/0x180 [] work_for_cpu_fn+0x4e/0xa0 [] process_one_work+0x8b7/0x1540 [] worker_thread+0x70a/0xe
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54091 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54091 CVE-2023-54091 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54091 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated and never freed in this function.
It was found with the ast driver, but most drivers using generic fbdev
setup are probably affected.
This fixes the following kmemleak report:
backtrace:
[] drm_mode_duplicate+0x45/0x220 [drm]
[] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]
[] drm_client_modeset_probe+0x6bd/0xf50 [drm]
[] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]
[] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]
[] drm_client_register+0x169/0x240 [drm]
[] ast_pci_probe+0x142/0x190 [ast]
[] local_pci_probe+0xdc/0x180
[] work_for_
Bugzilla
CVE-2023-54091 kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function
bugzilla·2025-12-24
CVE-2023-54091 [LOW] CVE-2023-54091 kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function
CVE-2023-54091 kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function
In the Linux kernel, the following vulnerability has been resolved:
drm/client: Fix memory leak in drm_client_target_cloned
dmt_mode is allocated and never freed in this function.
It was found with the ast driver, but most drivers using generic fbdev
setup are probably affected.
This fixes the following kmemleak report:
backtrace:
[] drm_mode_duplicate+0x45/0x220 [drm]
[] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]
[] drm_client_modeset_probe+0x6bd/0xf50 [drm]
[] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]
[] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]
[] drm_client_register+0x169/0x240 [drm]
[] ast_pci_probe+0x142/0x190 [ast]
[]
https://git.kernel.org/stable/c/105275879a80503686a8108af2f5c579a1c5aef4https://git.kernel.org/stable/c/4b596a6e2d2e0f9c14e4122506dd715f43fcd727https://git.kernel.org/stable/c/52daf6ba2e0d201640cb1ce42049c5c4426b4d6ehttps://git.kernel.org/stable/c/a4b978249e8fa94956fce8b70a709f7797716f62https://git.kernel.org/stable/c/a85e23a1ef63e45a18f0a30d7816fcb4a865ca95https://git.kernel.org/stable/c/b5359d7a5087ac398fc429da6833133b4784c268https://git.kernel.org/stable/c/c2a88e8bdf5f6239948d75283d0ae7e0c7945b03https://git.kernel.org/stable/c/d3009700f48602b557eade1f22c98b6bc20247e8
2025-12-24
Published