What’s Vulnerable › Vulnerabilities

CVE-2023-53448: fbdev: imxfb: Removed unneeded release_mem_region

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-01 · updated 2026-06-17
• Weakness: CWE-617

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Removed unneeded release_mem_region Remove unnecessary release_mem_region from the error path to prevent mem region from being released twice, which could avoid resource leak or other unexpected issues.

Affected products

• Linux kernel: from 6.0 before 6.1.42; from 6.2 before 6.4.7; 6.5-rc1, 6.5-rc2 — fixed in 6.1.42, 6.4.7

How to fix

Upgrade to a fixed version: Linux kernel 6.1.42, 6.4.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/38282a92c30422836d49e519bd109237f86a0888
• https://git.kernel.org/stable/c/45fcc058a75bf5d65cf4c32da44a252fbe873cd4
• https://git.kernel.org/stable/c/6aa851f6276fa08cd59b044bc2b803c49edf58a2

Get alerted when CVE-2023-53448 or the next vulnerability affects your stack