Riskcovery

CVE-2023-53444

drm/ttm: fix bulk_move corruption when adding a entry

State
Published
Severity
5.5 Medium
Published
Sep 18, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/ttm: fix bulk_move corruption when adding a entry

When the resource is the first in the bulk_move range, adding it again (thus moving it to the tail) will corrupt the list since the first pointer is not moved. This eventually lead to null pointer deref in ttm_lru_bulk_move_del()

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • fee2ede155423b0f7a559050a39750b98fe9db69 to before 70a3015683b007a0db4a1e858791b69afd45fc83Affected
  • fee2ede155423b0f7a559050a39750b98fe9db69 to before e7cf50e41bdc2d574056ebbfeaafc5f0e2562d5bAffected
  • fee2ede155423b0f7a559050a39750b98fe9db69 to before 4481913607e58196c48a4fef5e6f45350684ec3cAffected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.42 through 6.1.*Not affected
  • 6.4.7 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.