CVE-2023-53562
drm/msm: fix vram leak on bind errors
MEDIUM
5.5
CVSS Score
Published: October 4, 2025 at 03:17 PM UTC
Updated: June 17, 2026 at 06:45 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%
Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≥ 4.19.169v ≥ 5.10.9v ≥ 5.4.914.19.169 ≤ v < 4.205.10.9 ≤ v < 5.115.11 ≤ v < 6.1.295.11 ≤ v < 6.2.165.11 ≤ v < 6.3.35.11 ≤ v < 6.45.11.1 ≤ v < 6.1.295.4.91 ≤ v < 5.56.2 ≤ v < 6.2.166.3 ≤ v < 6.3.34.19.1695.10.95.115.11 rc35.11 rc45.11 rc55.11 rc65.11 rc75.4.91680689c609c7b2a15e52a9b9ca58fc2a4b2eeeba74e0f222c7394eae16cbe91233aa34ba5122ead565c626b4e14864be4f6886d73e86f3338f7bacd863f0c7b536288e2bd40cbc01c10465dd226b11
Vendor states this is fixed in 544711591a67a6da4d9f0f70ba3c805eb2548729 (fixed)
Vendor states this is fixed in 60d476af96015891c7959f30838ae7a9749932bf (fixed)
Vendor states this is fixed in c02e8c1c5b3eb0b6193946194ac280f58f48b3b5 (fixed)
Vendor states this is fixed in e3401e07ba98a94b978164b7e873c25e5fc82b4b (fixed)
Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 5.11 (unaffected)
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.1.29 (unaffected)
Vendor states this is fixed in 6.2.16 (unaffected)
Vendor states this is fixed in 6.3.3 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card