What’s Vulnerable › Vulnerabilities

CVE-2023-53849: drm/msm: fix workqueue leak on bind errors

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the workqueue also in case of early errors during bind (e.g. a subcomponent failing to bind). Since commit c3b790ea07a1 ("drm: Manage drm_mode_config_init with drmm_") the mode config will be freed when the drm device is released also when using the legacy interface, but add an explicit cleanup for consistency and to facilitate backporting. Patchwork: https://patchwork.freedesktop.org/patch/525093/

Affected products

• Linux kernel: from 3.14.41 before 3.15; 3.15 — fixed in 3.15, 6.4

How to fix

Upgrade to a fixed version: Linux kernel 3.15, 6.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/28e34db2f3e0130872e2384dd9df9f82bd89e967
• https://git.kernel.org/stable/c/6e1476225ec02eeebc4b79f793506f80bc4bca8f
• https://git.kernel.org/stable/c/8551c4b7c8ffb42f759547e5c39da5980abf2432
• https://git.kernel.org/stable/c/a75b49db6529b2af049eafd938fae888451c3685

Get alerted when CVE-2023-53849 or the next vulnerability affects your stack