Riskcovery

CVE-2023-52930

drm/i915: Fix potential bit_17 double-free

State
Published
Severity
7.8 High
Published
Mar 27, 2025
Updated
Aug 5, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Fix potential bit_17 double-free

A userspace with multiple threads racing I915_GEM_SET_TILING to set the tiling to I915_TILING_NONE could trigger a double free of the bit_17 bitmask. (Or conversely leak memory on the transition to tiled.) Move allocation/free'ing of the bitmask within the section protected by the obj lock.

[tursulin: Correct fixes tag and added cc stable.] (cherry picked from commit 10e0cbaaf1104f449d695c80bcacf930dcd3c42e)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 2850748ef8763ab46958e43a4d1c445f29eeb37d to before b591abac78e25269b12e3d7170c99463f8c5cb02Affected
  • 2850748ef8763ab46958e43a4d1c445f29eeb37d to before e3ebc3e23bd9028a8a9a26cbc5985f99be445f65Affected
  • 2850748ef8763ab46958e43a4d1c445f29eeb37d to before 0769f997a7b6d5cb8336db0b4ec3d2d311b8097cAffected
  • 2850748ef8763ab46958e43a4d1c445f29eeb37d to before 7057a8f126f14f14b040faecfa220fd27c6c2f85Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.168 through 5.10.*Not affected
  • 5.15.93 through 5.15.*Not affected
  • 6.1.11 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.