In the Linux kernel, the following vulnerability has been resolved:
drm/shmem-helper: Remove another errant put in error path
drmgemshmem_mmap() doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free.
{ "vanir_signatures": [ { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c", "function": "drm_gem_shmem_mmap" }, "signature_version": "v1", "digest": { "length": 496.0, "function_hash": "269793618674912199261903634954776992590" }, "id": "CVE-2023-53084-0891f777", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dede8c14a37a7ac458f9add56154a074ed78e7cf" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c", "function": "drm_gem_shmem_mmap" }, "signature_version": "v1", "digest": { "length": 496.0, "function_hash": "269793618674912199261903634954776992590" }, "id": "CVE-2023-53084-37edef46", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@77d26c824aa5a7e0681ef1d5b75fe538d746addc" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c", "function": "drm_gem_shmem_mmap" }, "signature_version": "v1", "digest": { "length": 527.0, "function_hash": "23117618561955227889926544109628842166" }, "id": "CVE-2023-53084-76d37f66", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cfb617967b05f8f27e862c97db1fabd8485f4db" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c", "function": "drm_gem_shmem_mmap" }, "signature_version": "v1", "digest": { "length": 544.0, "function_hash": "109664107300127957004374070724454165667" }, "id": "CVE-2023-53084-85d0b546", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684c7372bbd6447c2e86a2a84e97a1478604d21f" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c", "function": "drm_gem_shmem_mmap" }, "signature_version": "v1", "digest": { "length": 496.0, "function_hash": "269793618674912199261903634954776992590" }, "id": "CVE-2023-53084-a6f81857", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee9adb7a45516cfa536ca92253d7ae59d56db9e4" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "298111106247689692851167592287987751384", "21509150187981739155835216636259920423", "23773778897752090784551419834607460771", "218379490680582416913514465576416385002", "320257585964578185960660690507528381516", "236296099011385206845524744825243444027" ], "threshold": 0.9 }, "id": "CVE-2023-53084-aafe63be", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cfb617967b05f8f27e862c97db1fabd8485f4db" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "298111106247689692851167592287987751384", "21509150187981739155835216636259920423", "23773778897752090784551419834607460771", "218379490680582416913514465576416385002", "320257585964578185960660690507528381516", "236296099011385206845524744825243444027" ], "threshold": 0.9 }, "id": "CVE-2023-53084-b557ef0b", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee9adb7a45516cfa536ca92253d7ae59d56db9e4" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "38723953932045244047738273550642360583", "21509150187981739155835216636259920423", "23773778897752090784551419834607460771", "218379490680582416913514465576416385002", "17057635290394484430550078540601332071", "241758882071241850603719351551918846044" ], "threshold": 0.9 }, "id": "CVE-2023-53084-e1fb6459", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684c7372bbd6447c2e86a2a84e97a1478604d21f" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "298111106247689692851167592287987751384", "21509150187981739155835216636259920423", "23773778897752090784551419834607460771", "218379490680582416913514465576416385002", "320257585964578185960660690507528381516", "236296099011385206845524744825243444027" ], "threshold": 0.9 }, "id": "CVE-2023-53084-fa253e69", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@77d26c824aa5a7e0681ef1d5b75fe538d746addc" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/gpu/drm/drm_gem_shmem_helper.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "298111106247689692851167592287987751384", "21509150187981739155835216636259920423", "23773778897752090784551419834607460771", "218379490680582416913514465576416385002", "320257585964578185960660690507528381516", "236296099011385206845524744825243444027" ], "threshold": 0.9 }, "id": "CVE-2023-53084-fe72826c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dede8c14a37a7ac458f9add56154a074ed78e7cf" } ] }