CVE-2023-53324

drm/msm/mdp5: Don't leak some plane state

MEDIUM

5.5

CVSS Score

Published: September 16, 2025 at 04:11 PM UTC

Updated: June 17, 2026 at 06:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Don't leak some plane state Apparently no one noticed that mdp5 plane states leak like a sieve ever since we introduced plane_state->commit refcount a few years ago in 21a01abbe32a ("drm/atomic: Fix freeing connector/plane state too early by tracking commits, v3.") Fix it by using the right helpers. Patchwork: https://patchwork.freedesktop.org/patch/551236/

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.15 ≤ v < 4.19.2954.15 ≤ v < 5.10.1954.15 ≤ v < 5.15.1324.15 ≤ v < 5.4.2574.15 ≤ v < 6.1.534.15 ≤ v < 6.4.164.15 ≤ v < 6.5.34.15 ≤ v < 6.64.20 ≤ v < 5.4.2575.11 ≤ v < 5.15.1325.16 ≤ v < 6.1.535.5 ≤ v < 5.10.1956.2 ≤ v < 6.4.166.5 ≤ v < 6.5.321a01abbe32a3cbeb903378a24e504bfd9fe06484.15

Vendor states this is fixed in 12dfd02cbd1a678fbd66be0c2f79d5299c4921a9 (fixed)

Vendor states this is fixed in 2965015006ef18ca96d2eab9ebe6bca884c63291 (fixed)

Vendor states this is fixed in 5b0dd3a102f64996598bd1e8d8388848a7c561bc (fixed)

Vendor states this is fixed in 7fc11a830b2eb07a0e3c6f917e5e636df6fc5d4c (fixed)

Vendor states this is fixed in 815e42029f6e1e762898079f85546d6a0391ab95 (fixed)

Vendor states this is fixed in b8a61df6f40448cf46611f7af05b00970d08d620 (fixed)

Vendor states this is fixed in c0b1eee648702e04f1005d451f9689575b7f52ed (fixed)

Vendor states this is fixed in fd0ad3b2365c1c58aa5a761c18efc4817193beb6 (fixed)

Vendor states this is fixed in 4.15 (unaffected)

Vendor states this is fixed in 4.19.295 (unaffected)

Vendor states this is fixed in 5.10.195 (unaffected)

Vendor states this is fixed in 5.15.132 (unaffected)

Vendor states this is fixed in 5.4.257 (unaffected)

Vendor states this is fixed in 6.1.53 (unaffected)

Vendor states this is fixed in 6.4.16 (unaffected)

Vendor states this is fixed in 6.5.3 (unaffected)

Vendor states this is fixed in 6.6 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references