Riskcovery

CVE-2023-53545

drm/amdgpu: unmap and remove csa_va properly

State
Published
Severity
7.8 High
Published
Oct 4, 2025
Updated
Aug 5, 2026
Reserved
Oct 4, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: unmap and remove csa_va properly

Root PD BO should be reserved before unmap and remove a bo_va from VM otherwise lockdep will complain.

v2: check fpriv->csa_va is not NULL instead of amdgpu_mcbp (christian)

[14616.936827] WARNING: CPU: 6 PID: 1711 at drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c:1762 amdgpu_vm_bo_del+0x399/0x3f0 [amdgpu] [14616.937096] Call Trace: [14616.937097] <TASK> [14616.937102] amdgpu_driver_postclose_kms+0x249/0x2f0 [amdgpu] [14616.937187] drm_file_free+0x1d6/0x300 [drm] [14616.937207] drm_close_helper.isra.0+0x62/0x70 [drm] [14616.937220] drm_release+0x5e/0x100 [drm] [14616.937234] __fput+0x9f/0x280 [14616.937239] ____fput+0xe/0x20 [14616.937241] task_work_run+0x61/0x90 [14616.937246] exit_to_user_mode_prepare+0x215/0x220 [14616.937251] syscall_exit_to_user_mode+0x2a/0x60 [14616.937254] do_syscall_64+0x48/0x90 [14616.937257] entry_SYSCALL_64_after_hwframe+0x63/0xcd

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 1bc35e637a81dac5f5155e83a277c26708c4d4d7Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before ae325b245208394279a1dc412c831ebd71befb0dAffected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before a3a96bf843c356d1d9b2d7f6d0784b6ee28ca9d0Affected
  • d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 5daff15cd013422bc6d1efcfe82b586800025384Affected
LinuxLinux
  • 4.2Affected
  • before 4.2Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.167 through 6.1.*Not affected
  • 6.4.12 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.