CVE-2023-53084

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/shmem-helper: Remove another errant put in error path

drm_gem_shmem_mmap() doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < 684c7372bbd6447c2e86a2a84e97a1478604d21faffected
LinuxLinuxf49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < 5cfb617967b05f8f27e862c97db1fabd8485f4dbaffected
LinuxLinuxf49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < dede8c14a37a7ac458f9add56154a074ed78e7cfaffected
LinuxLinuxf49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < 77d26c824aa5a7e0681ef1d5b75fe538d746addcaffected
LinuxLinuxf49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < ee9adb7a45516cfa536ca92253d7ae59d56db9e4affected
LinuxLinux4655afcf0e3874af03afff8c8704b52350bdba47affected
LinuxLinux5.9.5 < 5.10affected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux5.10.176 <= 5.10.*unaffected
LinuxLinux5.15.104 <= 5.15.*unaffected
LinuxLinux6.1.21 <= 6.1.*unaffected
LinuxLinux6.2.8 <= 6.2.*unaffected
LinuxLinux6.3 <= *unaffected

Weaknesses

References