CVE-2023-53552
HIGH EPSS 4.8%
Published Oct 4, 20258mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
Published Oct 4, 2025 8mo ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines. (cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
4.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-416 Use After Free Memory Safety
Affected Products 2
References 3
- git.kernel.org https://git.kernel.org/stable/c/5eefc5307c983b59344a4cb89009819f580c84fa
- git.kernel.org https://git.kernel.org/stable/c/7fb464d52fa41c31a6fd1ad82888e67c65935d94
- git.kernel.org https://git.kernel.org/stable/c/8017a27cec32eac8c8f9430b0a3055840136b856
Remediation
- git.kernel.org https://git.kernel.org/stable/c/5eefc5307c983b59344a4cb89009819f580c84fa
- git.kernel.org https://git.kernel.org/stable/c/7fb464d52fa41c31a6fd1ad82888e67c65935d94
- git.kernel.org https://git.kernel.org/stable/c/8017a27cec32eac8c8f9430b0a3055840136b856