What’s Vulnerable › Vulnerabilities

CVE-2023-53562: drm/msm: fix vram leak on bind errors

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-04 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/

Affected products

• Linux kernel: from 4.19.169 before 4.20; from 5.4.91 before 5.5; from 5.10.9 before 5.11; from 5.11.1 before 6.1.29; from 6.2 before 6.2.16; from 6.3 before 6.3.3 — fixed in 4.20, 5.11, 5.5, 6.1.29, 6.2.16, 6.3.3

How to fix

Upgrade to a fixed version: Linux kernel 4.20, 5.11, 5.5, 6.1.29. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/544711591a67a6da4d9f0f70ba3c805eb2548729
• https://git.kernel.org/stable/c/60d476af96015891c7959f30838ae7a9749932bf
• https://git.kernel.org/stable/c/c02e8c1c5b3eb0b6193946194ac280f58f48b3b5
• https://git.kernel.org/stable/c/e3401e07ba98a94b978164b7e873c25e5fc82b4b

Get alerted when CVE-2023-53562 or the next vulnerability affects your stack