CVE-2023-53849
In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the workqueue also in case of early errors during bind (e.g. a subcomponent failing to bind). Since commit c3b790ea07a1 ("drm: Manage drm_mode_config_init with drmm_") the mode config will be freed when the drm device is released also when using the legacy interface, but add an explicit cleanup for consistency and to facilitate backporting. Patchwork: https://patchwork.freedesktop.org/patch/525093/
Affected versions
Linux kernel versions
3.14.41,
3.15
and later are affected. Fixed in
6.1.29,
6.2.16,
6.3.3,
6.4
and their respective stable series.
References
The following references provide additional information about CVE-2023-53849 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/28e34db2f3e0130872e2384dd9df9f82bd89e967
-
PatchKernel patch commithttps://git.kernel.org/stable/c/6e1476225ec02eeebc4b79f793506f80bc4bca8f
-
PatchKernel patch commithttps://git.kernel.org/stable/c/8551c4b7c8ffb42f759547e5c39da5980abf2432
Frequently asked questions
-
What is CVE-2023-53849?
CVE-2023-53849 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 3.14.41 onward and has been patched in 6.1.29, 6.2.16, 6.3.3 and others. CVE-2023-53849 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2023-53849?
Yes — CVE-2023-53849 has been patched. Fixed versions include 6.1.29, 6.2.16, 6.3.3 and others. If you are running Linux kernel 3.14.41 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2023-53849 actively exploited?
No — CVE-2023-53849 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.