PT-2025-49742 · Linux+1 · Linux Kernel+1

Published 2023-01-01 · Updated 2026-03-24 · CVE-2023-53851

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s drm/msm/dp subsystem related to the handling of auxiliary devices connected to the DisplayPort (DP) controller. Specifically, the issue arises from improper resource management when the DP controller is torn down, potentially leading to a use-after-free condition. This can manifest as EDID information being reported as all zeros in logs or, in some cases, a Kernel Address Sanitizer (KASAN) fault during attempts to read EDID data. The problem occurs because the device resources on the auxiliary bus are not consistently deallocated during error handling and component unbinding. The issue is addressed by explicitly depopulating the auxiliary bus in both the error path and the component unbind path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53851

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Debian

Linux Kernel

References · 1458

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53851.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53851 · Security Note
• https://ubuntu.com/security/CVE-2023-53851 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20477-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53851 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53851 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0315-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53851 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0278-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53851 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53851 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory