PT-2025-37868 · Linux+3 · Linux Kernel+3

Publicado

2023-08-16

·

Atualizado

2025-11-19

·

CVE-2023-53263

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a use-after-free issue in the error handling of the nouveau connector create function within the drm/nouveau/disp module. The vulnerability occurs when freeing the connector after calling drm connector init without first cleaning up the DRM side, leading to memory corruption. This issue may not resolve all regressions from a previous commit, but it addresses a specific memory corruption in error handling related to that commit.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALSA-2025_16880
BDU:2026-02056
CVE-2023-53263
RHSA-2024:2394
RHSA-2024_2394
SUSE-SU-2025:03600-1
SUSE-SU-2025:03615-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20851-1
SUSE-SU-2025:20861-1
SUSE-SU-2025:20870-1
SUSE-SU-2025:20898-1
SUSE-SU-2025:3751-1
SUSE-SU-2025:3761-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4141-1

Produtos afetados

Astra Linux
Linux Kernel
Red Hat
Suse