Log in Start free

Vulnerability · Published Sep 16, 2025 · Assigned by Linux

CVE-2023-53316drm/msm/dp: Free resources after unregistering them

High 7.8

In plain English

A high-severity use-after-free in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 94.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed, all the memory for those submodules has just been freed. Change the order of these operations to avoid the many use-after-free that otherwise happens in this code path. Patchwork: https://patchwork.freedesktop.org/patch/542166/

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DEBIAN-CVE-2023-53316
Debian:13linux6.4.4-1DEBIAN-CVE-2023-53316
Debian:14linux6.4.4-1DEBIAN-CVE-2023-53316
Ubuntu:22.04:LTSlinux5.15.0-86.96UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-aws5.15.0-1047.52UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-azure5.15.0-1049.56UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1049.56.1UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-gcp5.15.0-1044.52UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-gke5.15.0-1044.49UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1030.35UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-ibm5.15.0-1040.43UBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1043.49UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-kvm5.15.0-1044.49UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-86.95UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1037.37UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1018.18UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1005.5UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-oracle5.15.0-1045.51UBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-raspi5.15.0-1040.43UBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53316
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53316
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-53316

Affected products (as reported)

VendorProductVersions
Linux Linux c943b4948b5848fc0e07f875edbd35a973879e22 – before c67a55f7cc8d767d624235bf1bcd0947e56abe0fc943b4948b5848fc0e07f875edbd35a973879e22 – before 3c3f3d35f5e05c468b048eb42a4f8c62c6655692c943b4948b5848fc0e07f875edbd35a973879e22 – before 4e9f1a2367aea7d61f6781213e25313cd983b0d7c943b4948b5848fc0e07f875edbd35a973879e22 – before 5c3278db06e332fdc14f3f297499fb88ded264d2c943b4948b5848fc0e07f875edbd35a973879e22 – before ca47d0dc00968358c136a1847cfed550cedfd1b5c943b4948b5848fc0e07f875edbd35a973879e22 – before fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8
Linux Linux 5.10

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References