vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-54254

drm/ttm: Don't leak a resource on eviction error

HIGH
7.8
CVSS Score
Published: December 30, 2025 at 12:15 PM UTC
Updated: October 15, 2026 at 10:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Don't leak a resource on eviction error On eviction errors other than -EMULTIHOP we were leaking a resource. Fix. v2: - Avoid yet another goto (Andi Shyti)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
403797925768d9fa870f5b1ebcd20016b397083b5.14.65.156c68fbafb9cd13e13476043fd9f6e10f792f685a
Vendor states this is fixed in 6aea0032380bbb1efebd598ad733d16925167921 (fixed)
Vendor states this is fixed in 7738335d73d0686ec8995e0448e5d1b48cffb2a4 (fixed)
Vendor states this is fixed in e8188c461ee015ba0b9ab2fc82dbd5ebca5a5532 (fixed)
Vendor states this is fixed in e9c44738cb1f537b177cc1beabcf6913690460cd (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 5.15.124 (unaffected)
Vendor states this is fixed in 6.1.43 (unaffected)
Vendor states this is fixed in 6.4.5 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

Source: cverecord
https://git.kernel.org/stable/c/7738335d73d0686ec8995e0448e5d1b48cffb2a4
Source: cverecord
https://git.kernel.org/stable/c/e9c44738cb1f537b177cc1beabcf6913690460cd
Source: cverecord
https://git.kernel.org/stable/c/6aea0032380bbb1efebd598ad733d16925167921
Source: cverecord
https://git.kernel.org/stable/c/e8188c461ee015ba0b9ab2fc82dbd5ebca5a5532

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card