PT-2025-40768 · Linux+4 · Linux Kernel+4

Published 2023-01-13 · Updated 2026-02-05 · CVE-2023-53605

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) Alma Linux (affected versions not specified) SberLinux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to memory management within the AMD display driver. Specifically, a memory leakage was identified and resolved in the dc construct ctx() function. This issue could potentially lead to resource exhaustion over time.

Recommendations For Linux kernel, update to a newer version that contains the fix for this vulnerability. For Alma Linux, update to a newer version that contains the fix for this vulnerability. For SberLinux kernel, update to a newer version that contains the fix for this vulnerability.

Exploit

Fix

Memory Leak

Improper Resource Release

Weakness Enumeration

CWE-401

CWE-404

Related Identifiers

ALSA-2025_16880

BDU:2026-04334

CESA-2023_7077

CVE-2023-53605

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Amd Display

Centos

Linux Kernel

Red Hat

Suse

References · 458

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53605.json · Exploit
• https://git.kernel.org/stable/c/9ae15ebaefc4878d614f10cc56ea672f88cea582 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53605 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53605 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4139-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6b8701be1f66064ca72733c5f6e13748cdbf8397 · Patch
• https://git.kernel.org/stable/c/d473c55ce1975c9e601c25293328a5039225d2b2 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53605 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04334 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53605 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53605 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53605 · Vendor Advisory
• https://git.kernel.org/stable/c/1bdea8ee92a6abc650b2189fd5c53f36859baecb · Patch