CVE-2023-53014

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Mar 27, 2025
Updated: Apr 15, 2025
CWE ID 401

Summary

CVE-2023-53014 is a recently identified vulnerability in the Linux kernel affecting the dmaengine component of the Tegra driver. The issue stems from a memory leak in the terminate_all() function, which fails to properly terminate active vdesc structures during transfer termination. This oversight results in the descriptor being absent from the desc_terminated list, causing it to persist and leading to a memory leak. The issue is resolved by ensuring that the vdesc is present in the desc_terminated list before it is freed.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share