CVE-2023-53084

drm/shmem-helper: Remove another errant put in error path

State: Published
Severity: 7.8 High
Published: May 2, 2025
Updated: Oct 15, 2026
Reserved: May 2, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/shmem-helper: Remove another errant put in error path

drm_gem_shmem_mmap() doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before 684c7372bbd6447c2e86a2a84e97a1478604d21fAffected f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before 5cfb617967b05f8f27e862c97db1fabd8485f4dbAffected f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before dede8c14a37a7ac458f9add56154a074ed78e7cfAffected f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before 77d26c824aa5a7e0681ef1d5b75fe538d746addcAffected f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before ee9adb7a45516cfa536ca92253d7ae59d56db9e4Affected 4655afcf0e3874af03afff8c8704b52350bdba47Affected 5.9.5 to before 5.10Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.176 through 5.10.Not affected 5.15.104 through 5.15.Not affected 6.1.21 through 6.1.Not affected 6.2.8 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before 684c7372bbd6447c2e86a2a84e97a1478604d21fAffected
f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before 5cfb617967b05f8f27e862c97db1fabd8485f4dbAffected
f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before dede8c14a37a7ac458f9add56154a074ed78e7cfAffected
f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before 77d26c824aa5a7e0681ef1d5b75fe538d746addcAffected
f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a to before ee9adb7a45516cfa536ca92253d7ae59d56db9e4Affected
4655afcf0e3874af03afff8c8704b52350bdba47Affected
5.9.5 to before 5.10Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.176 through 5.10.*Not affected
5.15.104 through 5.15.*Not affected
6.1.21 through 6.1.*Not affected
6.2.8 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.