CVE-2023-53849 (GCVE-0-2023-53849)

Vulnerability from cvelistv5 – Published: 2025-12-09 01:30 – Updated: 2026-05-23 15:31
VLAI
Title
drm/msm: fix workqueue leak on bind errors
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the workqueue also in case of early errors during bind (e.g. a subcomponent failing to bind). Since commit c3b790ea07a1 ("drm: Manage drm_mode_config_init with drmm_") the mode config will be freed when the drm device is released also when using the legacy interface, but add an explicit cleanup for consistency and to facilitate backporting. Patchwork: https://patchwork.freedesktop.org/patch/525093/
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 060530f1ea6740eb767085008d183f89ccdd289c , < 6e1476225ec02eeebc4b79f793506f80bc4bca8f (git)
Affected: 060530f1ea6740eb767085008d183f89ccdd289c , < 28e34db2f3e0130872e2384dd9df9f82bd89e967 (git)
Affected: 060530f1ea6740eb767085008d183f89ccdd289c , < 8551c4b7c8ffb42f759547e5c39da5980abf2432 (git)
Affected: 060530f1ea6740eb767085008d183f89ccdd289c , < a75b49db6529b2af049eafd938fae888451c3685 (git)
Affected: 3e796097404e325fa8d4f48a2af61f2e01e3ef02 (git)
Affected: 3.14.41 , < 3.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 3.15
Unaffected: 0 , < 3.15 (semver)
Unaffected: 6.1.29 , ≤ 6.1.* (semver)
Unaffected: 6.2.16 , ≤ 6.2.* (semver)
Unaffected: 6.3.3 , ≤ 6.3.* (semver)
Unaffected: 6.4 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/msm/msm_drv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6e1476225ec02eeebc4b79f793506f80bc4bca8f",
              "status": "affected",
              "version": "060530f1ea6740eb767085008d183f89ccdd289c",
              "versionType": "git"
            },
            {
              "lessThan": "28e34db2f3e0130872e2384dd9df9f82bd89e967",
              "status": "affected",
              "version": "060530f1ea6740eb767085008d183f89ccdd289c",
              "versionType": "git"
            },
            {
              "lessThan": "8551c4b7c8ffb42f759547e5c39da5980abf2432",
              "status": "affected",
              "version": "060530f1ea6740eb767085008d183f89ccdd289c",
              "versionType": "git"
            },
            {
              "lessThan": "a75b49db6529b2af049eafd938fae888451c3685",
              "status": "affected",
              "version": "060530f1ea6740eb767085008d183f89ccdd289c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3e796097404e325fa8d4f48a2af61f2e01e3ef02",
              "versionType": "git"
            },
            {
              "lessThan": "3.15",
              "status": "affected",
              "version": "3.14.41",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/msm/msm_drv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.15"
            },
            {
              "lessThan": "3.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.29",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.29",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.16",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.14.41",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: fix workqueue leak on bind errors\n\nMake sure to destroy the workqueue also in case of early errors during\nbind (e.g. a subcomponent failing to bind).\n\nSince commit c3b790ea07a1 (\"drm: Manage drm_mode_config_init with\ndrmm_\") the mode config will be freed when the drm device is released\nalso when using the legacy interface, but add an explicit cleanup for\nconsistency and to facilitate backporting.\n\nPatchwork: https://patchwork.freedesktop.org/patch/525093/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:31:20.400Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/6e1476225ec02eeebc4b79f793506f80bc4bca8f"
        },
        {
          "url": "https://git.kernel.org/stable/c/28e34db2f3e0130872e2384dd9df9f82bd89e967"
        },
        {
          "url": "https://git.kernel.org/stable/c/8551c4b7c8ffb42f759547e5c39da5980abf2432"
        },
        {
          "url": "https://git.kernel.org/stable/c/a75b49db6529b2af049eafd938fae888451c3685"
        }
      ],
      "title": "drm/msm: fix workqueue leak on bind errors",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53849",
    "datePublished": "2025-12-09T01:30:13.402Z",
    "dateReserved": "2025-12-09T01:27:17.827Z",
    "dateUpdated": "2026-05-23T15:31:20.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53849",
      "date": "2026-09-22",
      "epss": "0.00221",
      "percentile": "0.12951"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/gpu/drm/msm/msm_drv.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "6e1476225ec02eeebc4b79f793506f80bc4bca8f",
                    "status": "affected",
                    "version": "060530f1ea6740eb767085008d183f89ccdd289c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "28e34db2f3e0130872e2384dd9df9f82bd89e967",
                    "status": "affected",
                    "version": "060530f1ea6740eb767085008d183f89ccdd289c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8551c4b7c8ffb42f759547e5c39da5980abf2432",
                    "status": "affected",
                    "version": "060530f1ea6740eb767085008d183f89ccdd289c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a75b49db6529b2af049eafd938fae888451c3685",
                    "status": "affected",
                    "version": "060530f1ea6740eb767085008d183f89ccdd289c",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "3e796097404e325fa8d4f48a2af61f2e01e3ef02",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3.15",
                    "status": "affected",
                    "version": "3.14.41",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/gpu/drm/msm/msm_drv.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.15"
                  },
                  {
                    "lessThan": "3.15",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.29",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.2.*",
                    "status": "unaffected",
                    "version": "6.2.16",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.3.*",
                    "status": "unaffected",
                    "version": "6.3.3",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.4",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: fix workqueue leak on bind errors\n\nMake sure to destroy the workqueue also in case of early errors during\nbind (e.g. a subcomponent failing to bind).\n\nSince commit c3b790ea07a1 (\"drm: Manage drm_mode_config_init with\ndrmm_\") the mode config will be freed when the drm device is released\nalso when using the legacy interface, but add an explicit cleanup for\nconsistency and to facilitate backporting.\n\nPatchwork: https://patchwork.freedesktop.org/patch/525093/"
          }
        ],
        "id": "CVE-2023-53849",
        "lastModified": "2026-06-17T06:46:10.830",
        "metrics": {},
        "published": "2025-12-09T16:17:25.427",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/28e34db2f3e0130872e2384dd9df9f82bd89e967"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/6e1476225ec02eeebc4b79f793506f80bc4bca8f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8551c4b7c8ffb42f759547e5c39da5980abf2432"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/a75b49db6529b2af049eafd938fae888451c3685"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Deferred"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-29T22:38:46+00:00",
      "cve": "CVE-2023-53849",
      "id": "CVE-2023-53849",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/msm: fix workqueue leak on bind errors",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53849.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.