PT-2025-38357 · Linux+2 · Linux Kernel+2

Published 2025-09-18 · Updated 2025-12-12 · CVE-2023-53378

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the DRM/i915/dpt subsystem. The i915 gem object is framebuffer() function does not recognize the buffer object (BO) containing the framebuffer’s DPT as a framebuffer itself. This can lead to the DPT BO being evicted by the shrinker while the actual framebuffer BO remains bound, particularly when the DPT is allocated from regular shared memory. This can cause a system crash during hibernation when attempting to rewrite page table entries (PTEs) within the already evicted DPT object. It is suggested that this issue might also be related to display faults under memory pressure, though further investigation is needed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-06037

CVE-2023-53378

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 837

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53378.json · Exploit
• https://bdu.fstec.ru/vul/2026-06037 · Security Note
• https://ubuntu.com/security/CVE-2023-53378 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53378 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53378 · Vendor Advisory
• https://git.kernel.org/stable/c/5390a02b4508416b9bee96674f141c68f89bafbc · Patch
• https://git.kernel.org/stable/c/3413881e1ecc3cba722a2e87ec099692eed5be28 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53378 · Security Note
• https://git.kernel.org/stable/c/c781c107731fc09ce4330c8c636b8446d0f72aa4 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53378 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53378 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53378 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53378 · Vendor Advisory