CVE-2023-53002

Summary

CVE-2023-53002 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the drm/i915 driver where a memory leak occurred due to the unbalanced use of drm_vma_node_allow() and drm_vma_node_revoke(). These functions should be called in pairs, but the current implementation only calls drm_vma_node_allow() each time mmap_offset is used by the client. Since mmap_offset is reused, the per-file vm_count may remain non-zero, leading to a leaked rbtree. To prevent this memory leak, the recommended solution is to use drm_vma_node_allow_once() instead.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.