CVE-2023-53316

drm/msm/dp: Free resources after unregistering them

State: Published
Severity: 7.8 High
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dp: Free resources after unregistering them

The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed, all the memory for those submodules has just been freed.

Change the order of these operations to avoid the many use-after-free that otherwise happens in this code path.

Patchwork: https://patchwork.freedesktop.org/patch/542166/

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	c943b4948b5848fc0e07f875edbd35a973879e22 to before c67a55f7cc8d767d624235bf1bcd0947e56abe0fAffected c943b4948b5848fc0e07f875edbd35a973879e22 to before 3c3f3d35f5e05c468b048eb42a4f8c62c6655692Affected c943b4948b5848fc0e07f875edbd35a973879e22 to before 4e9f1a2367aea7d61f6781213e25313cd983b0d7Affected c943b4948b5848fc0e07f875edbd35a973879e22 to before 5c3278db06e332fdc14f3f297499fb88ded264d2Affected c943b4948b5848fc0e07f875edbd35a973879e22 to before ca47d0dc00968358c136a1847cfed550cedfd1b5Affected c943b4948b5848fc0e07f875edbd35a973879e22 to before fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.3.13 through 6.3.Not affected 6.4.4 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

c943b4948b5848fc0e07f875edbd35a973879e22 to before c67a55f7cc8d767d624235bf1bcd0947e56abe0fAffected
c943b4948b5848fc0e07f875edbd35a973879e22 to before 3c3f3d35f5e05c468b048eb42a4f8c62c6655692Affected
c943b4948b5848fc0e07f875edbd35a973879e22 to before 4e9f1a2367aea7d61f6781213e25313cd983b0d7Affected
c943b4948b5848fc0e07f875edbd35a973879e22 to before 5c3278db06e332fdc14f3f297499fb88ded264d2Affected
c943b4948b5848fc0e07f875edbd35a973879e22 to before ca47d0dc00968358c136a1847cfed550cedfd1b5Affected
c943b4948b5848fc0e07f875edbd35a973879e22 to before fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.3.13 through 6.3.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.