Riskcovery

CVE-2023-53353

accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

State
Published
Severity
5.5 Medium
Published
Sep 17, 2025
Updated
Oct 3, 2026
Reserved
Sep 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

The memory manager IDR is currently destroyed when user releases the file descriptor. However, at this point the user context might be still held, and memory buffers might be still in use. Later on, calls to release those buffers will fail due to not finding their handles in the IDR, leading to a memory leak. To avoid this leak, split the IDR destruction from the memory manager fini, and postpone it to hpriv_release() when there is no user context and no buffers are used.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 0feaf86d4e69507ab9b2af7dcc63a6886352d5db to before c96cc6b46fdce89a8feb270a35bbe5086c142534Affected
  • 0feaf86d4e69507ab9b2af7dcc63a6886352d5db to before 840de329ca99cafd0cdde9c6ac160b1330942abaAffected
  • 0feaf86d4e69507ab9b2af7dcc63a6886352d5db to before 2e8e9a895c4589f124a37fc84d123b5114406e94Affected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.3.4 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.