CVE-2023-53455 (GCVE-0-2023-53455)

Vulnerability from cvelistv5 – Published: 2025-10-01 11:42 – Updated: 2025-10-01 11:42
VLAI?
Title
drm/vc4: drop all currently held locks if deadlock happens
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drop all currently held locks if deadlock happens If vc4_hdmi_reset_link() returns -EDEADLK, it means that a deadlock happened in the locking context. This situation should be addressed by dropping all currently held locks and block until the contended lock becomes available. Currently, vc4 is not dealing with the deadlock properly, producing the following output when PROVE_LOCKING is enabled: [ 825.612809] ------------[ cut here ]------------ [ 825.612852] WARNING: CPU: 1 PID: 116 at drivers/gpu/drm/drm_modeset_lock.c:276 drm_modeset_drop_locks+0x60/0x68 [drm] [ 825.613458] Modules linked in: 8021q mrp garp stp llc raspberrypi_cpufreq brcmfmac brcmutil crct10dif_ce hci_uart cfg80211 btqca btbcm bluetooth vc4 raspberrypi_hwmon snd_soc_hdmi_codec cec clk_raspberrypi ecdh_generic drm_display_helper ecc rfkill drm_dma_helper drm_kms_helper pwm_bcm2835 bcm2835_thermal bcm2835_rng rng_core i2c_bcm2835 drm fuse ip_tables x_tables ipv6 [ 825.613735] CPU: 1 PID: 116 Comm: kworker/1:2 Tainted: G W 6.1.0-rc6-01399-g941aae326315 #3 [ 825.613759] Hardware name: Raspberry Pi 3 Model B Rev 1.2 (DT) [ 825.613777] Workqueue: events output_poll_execute [drm_kms_helper] [ 825.614038] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 825.614063] pc : drm_modeset_drop_locks+0x60/0x68 [drm] [ 825.614603] lr : drm_helper_probe_detect+0x120/0x1b4 [drm_kms_helper] [ 825.614829] sp : ffff800008313bf0 [ 825.614844] x29: ffff800008313bf0 x28: ffffcd7778b8b000 x27: 0000000000000000 [ 825.614883] x26: 0000000000000001 x25: 0000000000000001 x24: ffff677cc35c2758 [ 825.614920] x23: ffffcd7707d01430 x22: ffffcd7707c3edc7 x21: 0000000000000001 [ 825.614958] x20: 0000000000000000 x19: ffff800008313c10 x18: 000000000000b6d3 [ 825.614995] x17: ffffcd777835e214 x16: ffffcd7777cef870 x15: fffff81000000000 [ 825.615033] x14: 0000000000000000 x13: 0000000000000099 x12: 0000000000000002 [ 825.615070] x11: 72917988020af800 x10: 72917988020af800 x9 : 72917988020af800 [ 825.615108] x8 : ffff677cc665e0a8 x7 : d00a8c180000110c x6 : ffffcd77774c0054 [ 825.615145] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 825.615181] x2 : ffff677cc55e1880 x1 : ffffcd7777cef8ec x0 : ffff800008313c10 [ 825.615219] Call trace: [ 825.615232] drm_modeset_drop_locks+0x60/0x68 [drm] [ 825.615773] drm_helper_probe_detect+0x120/0x1b4 [drm_kms_helper] [ 825.616003] output_poll_execute+0xe4/0x224 [drm_kms_helper] [ 825.616233] process_one_work+0x2b4/0x618 [ 825.616264] worker_thread+0x24c/0x464 [ 825.616288] kthread+0xec/0x110 [ 825.616310] ret_from_fork+0x10/0x20 [ 825.616335] irq event stamp: 7634 [ 825.616349] hardirqs last enabled at (7633): [<ffffcd777831ee90>] _raw_spin_unlock_irq+0x3c/0x78 [ 825.616384] hardirqs last disabled at (7634): [<ffffcd7778315a78>] __schedule+0x134/0x9f0 [ 825.616411] softirqs last enabled at (7630): [<ffffcd7707aacea0>] local_bh_enable+0x4/0x30 [ipv6] [ 825.617019] softirqs last disabled at (7618): [<ffffcd7707aace70>] local_bh_disable+0x4/0x30 [ipv6] [ 825.617586] ---[ end trace 0000000000000000 ]--- Therefore, deal with the deadlock as suggested by [1], using the function drm_modeset_backoff(). [1] https://docs.kernel.org/gpu/drm-kms.html?highlight=kms#kms-locking
Severity ?
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 6bed2ea3cb3856edf37cca20753e689ee8774793 , < 41286a53e7f54202fd277cd516724de3ab7497c7 (git)
Affected: 6bed2ea3cb3856edf37cca20753e689ee8774793 , < f483eda89a2e717daa7b15c8ca228a209f65617b (git)
Affected: 6bed2ea3cb3856edf37cca20753e689ee8774793 , < 479d4f0be4237ba33bc9432787aeb62c90e30f95 (git)
Create a notification for this product.
    Linux Linux Affected: 6.1
Unaffected: 0 , < 6.1 (semver)
Unaffected: 6.1.16 , ≤ 6.1.* (semver)
Unaffected: 6.2.3 , ≤ 6.2.* (semver)
Unaffected: 6.3 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/vc4/vc4_hdmi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "41286a53e7f54202fd277cd516724de3ab7497c7",
              "status": "affected",
              "version": "6bed2ea3cb3856edf37cca20753e689ee8774793",
              "versionType": "git"
            },
            {
              "lessThan": "f483eda89a2e717daa7b15c8ca228a209f65617b",
              "status": "affected",
              "version": "6bed2ea3cb3856edf37cca20753e689ee8774793",
              "versionType": "git"
            },
            {
              "lessThan": "479d4f0be4237ba33bc9432787aeb62c90e30f95",
              "status": "affected",
              "version": "6bed2ea3cb3856edf37cca20753e689ee8774793",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/vc4/vc4_hdmi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.1"
            },
            {
              "lessThan": "6.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.16",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.3",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: drop all currently held locks if deadlock happens\n\nIf vc4_hdmi_reset_link() returns -EDEADLK, it means that a deadlock\nhappened in the locking context. This situation should be addressed by\ndropping all currently held locks and block until the contended lock\nbecomes available. Currently, vc4 is not dealing with the deadlock\nproperly, producing the following output when PROVE_LOCKING is enabled:\n\n[  825.612809] ------------[ cut here ]------------\n[  825.612852] WARNING: CPU: 1 PID: 116 at drivers/gpu/drm/drm_modeset_lock.c:276 drm_modeset_drop_locks+0x60/0x68 [drm]\n[  825.613458] Modules linked in: 8021q mrp garp stp llc\nraspberrypi_cpufreq brcmfmac brcmutil crct10dif_ce hci_uart cfg80211\nbtqca btbcm bluetooth vc4 raspberrypi_hwmon snd_soc_hdmi_codec cec\nclk_raspberrypi ecdh_generic drm_display_helper ecc rfkill\ndrm_dma_helper drm_kms_helper pwm_bcm2835 bcm2835_thermal bcm2835_rng\nrng_core i2c_bcm2835 drm fuse ip_tables x_tables ipv6\n[  825.613735] CPU: 1 PID: 116 Comm: kworker/1:2 Tainted: G        W 6.1.0-rc6-01399-g941aae326315 #3\n[  825.613759] Hardware name: Raspberry Pi 3 Model B Rev 1.2 (DT)\n[  825.613777] Workqueue: events output_poll_execute [drm_kms_helper]\n[  825.614038] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[  825.614063] pc : drm_modeset_drop_locks+0x60/0x68 [drm]\n[  825.614603] lr : drm_helper_probe_detect+0x120/0x1b4 [drm_kms_helper]\n[  825.614829] sp : ffff800008313bf0\n[  825.614844] x29: ffff800008313bf0 x28: ffffcd7778b8b000 x27: 0000000000000000\n[  825.614883] x26: 0000000000000001 x25: 0000000000000001 x24: ffff677cc35c2758\n[  825.614920] x23: ffffcd7707d01430 x22: ffffcd7707c3edc7 x21: 0000000000000001\n[  825.614958] x20: 0000000000000000 x19: ffff800008313c10 x18: 000000000000b6d3\n[  825.614995] x17: ffffcd777835e214 x16: ffffcd7777cef870 x15: fffff81000000000\n[  825.615033] x14: 0000000000000000 x13: 0000000000000099 x12: 0000000000000002\n[  825.615070] x11: 72917988020af800 x10: 72917988020af800 x9 : 72917988020af800\n[  825.615108] x8 : ffff677cc665e0a8 x7 : d00a8c180000110c x6 : ffffcd77774c0054\n[  825.615145] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000\n[  825.615181] x2 : ffff677cc55e1880 x1 : ffffcd7777cef8ec x0 : ffff800008313c10\n[  825.615219] Call trace:\n[  825.615232]  drm_modeset_drop_locks+0x60/0x68 [drm]\n[  825.615773]  drm_helper_probe_detect+0x120/0x1b4 [drm_kms_helper]\n[  825.616003]  output_poll_execute+0xe4/0x224 [drm_kms_helper]\n[  825.616233]  process_one_work+0x2b4/0x618\n[  825.616264]  worker_thread+0x24c/0x464\n[  825.616288]  kthread+0xec/0x110\n[  825.616310]  ret_from_fork+0x10/0x20\n[  825.616335] irq event stamp: 7634\n[  825.616349] hardirqs last  enabled at (7633): [\u003cffffcd777831ee90\u003e] _raw_spin_unlock_irq+0x3c/0x78\n[  825.616384] hardirqs last disabled at (7634): [\u003cffffcd7778315a78\u003e] __schedule+0x134/0x9f0\n[  825.616411] softirqs last  enabled at (7630): [\u003cffffcd7707aacea0\u003e] local_bh_enable+0x4/0x30 [ipv6]\n[  825.617019] softirqs last disabled at (7618): [\u003cffffcd7707aace70\u003e] local_bh_disable+0x4/0x30 [ipv6]\n[  825.617586] ---[ end trace 0000000000000000 ]---\n\nTherefore, deal with the deadlock as suggested by [1], using the\nfunction drm_modeset_backoff().\n\n[1] https://docs.kernel.org/gpu/drm-kms.html?highlight=kms#kms-locking"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-01T11:42:26.791Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/41286a53e7f54202fd277cd516724de3ab7497c7"
        },
        {
          "url": "https://git.kernel.org/stable/c/f483eda89a2e717daa7b15c8ca228a209f65617b"
        },
        {
          "url": "https://git.kernel.org/stable/c/479d4f0be4237ba33bc9432787aeb62c90e30f95"
        }
      ],
      "title": "drm/vc4: drop all currently held locks if deadlock happens",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53455",
    "datePublished": "2025-10-01T11:42:26.791Z",
    "dateReserved": "2025-09-17T14:54:09.754Z",
    "dateUpdated": "2025-10-01T11:42:26.791Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53455\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-10-01T12:15:44.910\",\"lastModified\":\"2026-01-16T21:15:53.820\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/vc4: drop all currently held locks if deadlock happens\\n\\nIf vc4_hdmi_reset_link() returns -EDEADLK, it means that a deadlock\\nhappened in the locking context. This situation should be addressed by\\ndropping all currently held locks and block until the contended lock\\nbecomes available. Currently, vc4 is not dealing with the deadlock\\nproperly, producing the following output when PROVE_LOCKING is enabled:\\n\\n[  825.612809] ------------[ cut here ]------------\\n[  825.612852] WARNING: CPU: 1 PID: 116 at drivers/gpu/drm/drm_modeset_lock.c:276 drm_modeset_drop_locks+0x60/0x68 [drm]\\n[  825.613458] Modules linked in: 8021q mrp garp stp llc\\nraspberrypi_cpufreq brcmfmac brcmutil crct10dif_ce hci_uart cfg80211\\nbtqca btbcm bluetooth vc4 raspberrypi_hwmon snd_soc_hdmi_codec cec\\nclk_raspberrypi ecdh_generic drm_display_helper ecc rfkill\\ndrm_dma_helper drm_kms_helper pwm_bcm2835 bcm2835_thermal bcm2835_rng\\nrng_core i2c_bcm2835 drm fuse ip_tables x_tables ipv6\\n[  825.613735] CPU: 1 PID: 116 Comm: kworker/1:2 Tainted: G        W 6.1.0-rc6-01399-g941aae326315 #3\\n[  825.613759] Hardware name: Raspberry Pi 3 Model B Rev 1.2 (DT)\\n[  825.613777] Workqueue: events output_poll_execute [drm_kms_helper]\\n[  825.614038] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\\n[  825.614063] pc : drm_modeset_drop_locks+0x60/0x68 [drm]\\n[  825.614603] lr : drm_helper_probe_detect+0x120/0x1b4 [drm_kms_helper]\\n[  825.614829] sp : ffff800008313bf0\\n[  825.614844] x29: ffff800008313bf0 x28: ffffcd7778b8b000 x27: 0000000000000000\\n[  825.614883] x26: 0000000000000001 x25: 0000000000000001 x24: ffff677cc35c2758\\n[  825.614920] x23: ffffcd7707d01430 x22: ffffcd7707c3edc7 x21: 0000000000000001\\n[  825.614958] x20: 0000000000000000 x19: ffff800008313c10 x18: 000000000000b6d3\\n[  825.614995] x17: ffffcd777835e214 x16: ffffcd7777cef870 x15: fffff81000000000\\n[  825.615033] x14: 0000000000000000 x13: 0000000000000099 x12: 0000000000000002\\n[  825.615070] x11: 72917988020af800 x10: 72917988020af800 x9 : 72917988020af800\\n[  825.615108] x8 : ffff677cc665e0a8 x7 : d00a8c180000110c x6 : ffffcd77774c0054\\n[  825.615145] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000\\n[  825.615181] x2 : ffff677cc55e1880 x1 : ffffcd7777cef8ec x0 : ffff800008313c10\\n[  825.615219] Call trace:\\n[  825.615232]  drm_modeset_drop_locks+0x60/0x68 [drm]\\n[  825.615773]  drm_helper_probe_detect+0x120/0x1b4 [drm_kms_helper]\\n[  825.616003]  output_poll_execute+0xe4/0x224 [drm_kms_helper]\\n[  825.616233]  process_one_work+0x2b4/0x618\\n[  825.616264]  worker_thread+0x24c/0x464\\n[  825.616288]  kthread+0xec/0x110\\n[  825.616310]  ret_from_fork+0x10/0x20\\n[  825.616335] irq event stamp: 7634\\n[  825.616349] hardirqs last  enabled at (7633): [\u003cffffcd777831ee90\u003e] _raw_spin_unlock_irq+0x3c/0x78\\n[  825.616384] hardirqs last disabled at (7634): [\u003cffffcd7778315a78\u003e] __schedule+0x134/0x9f0\\n[  825.616411] softirqs last  enabled at (7630): [\u003cffffcd7707aacea0\u003e] local_bh_enable+0x4/0x30 [ipv6]\\n[  825.617019] softirqs last disabled at (7618): [\u003cffffcd7707aace70\u003e] local_bh_disable+0x4/0x30 [ipv6]\\n[  825.617586] ---[ end trace 0000000000000000 ]---\\n\\nTherefore, deal with the deadlock as suggested by [1], using the\\nfunction drm_modeset_backoff().\\n\\n[1] https://docs.kernel.org/gpu/drm-kms.html?highlight=kms#kms-locking\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1\",\"versionEndExcluding\":\"6.1.16\",\"matchCriteriaId\":\"1F23D678-BB39-469E-A28B-8101B7C44CEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.2.3\",\"matchCriteriaId\":\"88C67289-22AD-4CA9-B202-5F5A80E5BA4B\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/41286a53e7f54202fd277cd516724de3ab7497c7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/479d4f0be4237ba33bc9432787aeb62c90e30f95\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f483eda89a2e717daa7b15c8ca228a209f65617b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.