CVE-2023-53849

drm/msm: fix workqueue leak on bind errors

N/A
Published: December 9, 2025 at 01:30 AM UTC
Updated: June 17, 2026 at 06:46 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the workqueue also in case of early errors during bind (e.g. a subcomponent failing to bind). Since commit c3b790ea07a1 ("drm: Manage drm_mode_config_init with drmm_") the mode config will be freed when the drm device is released also when using the legacy interface, but add an explicit cleanup for consistency and to facilitate backporting. Patchwork: https://patchwork.freedesktop.org/patch/525093/

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 3.14.413.14.41 ≤ v < 3.153.15 ≤ v < 6.1.293.15 ≤ v < 6.2.163.15 ≤ v < 6.3.33.15 ≤ v < 6.43.14.413.153e796097404e325fa8d4f48a2af61f2e01e3ef0260530f1ea6740eb767085008d183f89ccdd289c
Vendor states this is fixed in 28e34db2f3e0130872e2384dd9df9f82bd89e967 (fixed)
Vendor states this is fixed in 6e1476225ec02eeebc4b79f793506f80bc4bca8f (fixed)
Vendor states this is fixed in 8551c4b7c8ffb42f759547e5c39da5980abf2432 (fixed)
Vendor states this is fixed in a75b49db6529b2af049eafd938fae888451c3685 (fixed)
Vendor states this is fixed in 3.15 (unaffected)
Vendor states this is fixed in 6.1.29 (unaffected)
Vendor states this is fixed in 6.2.16 (unaffected)
Vendor states this is fixed in 6.3.3 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card