In the Linux kernel, the following vulnerability has been resolved:
drm/shmem-helper: Remove another errant put in error path
drmgemshmem_mmap() doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free.
[
{
"deprecated": false,
"id": "CVE-2023-53084-0891f777",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dede8c14a37a7ac458f9add56154a074ed78e7cf",
"digest": {
"function_hash": "269793618674912199261903634954776992590",
"length": 496.0
},
"target": {
"function": "drm_gem_shmem_mmap",
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-37edef46",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@77d26c824aa5a7e0681ef1d5b75fe538d746addc",
"digest": {
"function_hash": "269793618674912199261903634954776992590",
"length": 496.0
},
"target": {
"function": "drm_gem_shmem_mmap",
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-76d37f66",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cfb617967b05f8f27e862c97db1fabd8485f4db",
"digest": {
"function_hash": "23117618561955227889926544109628842166",
"length": 527.0
},
"target": {
"function": "drm_gem_shmem_mmap",
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-85d0b546",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684c7372bbd6447c2e86a2a84e97a1478604d21f",
"digest": {
"function_hash": "109664107300127957004374070724454165667",
"length": 544.0
},
"target": {
"function": "drm_gem_shmem_mmap",
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-a6f81857",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee9adb7a45516cfa536ca92253d7ae59d56db9e4",
"digest": {
"function_hash": "269793618674912199261903634954776992590",
"length": 496.0
},
"target": {
"function": "drm_gem_shmem_mmap",
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-aafe63be",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cfb617967b05f8f27e862c97db1fabd8485f4db",
"digest": {
"threshold": 0.9,
"line_hashes": [
"298111106247689692851167592287987751384",
"21509150187981739155835216636259920423",
"23773778897752090784551419834607460771",
"218379490680582416913514465576416385002",
"320257585964578185960660690507528381516",
"236296099011385206845524744825243444027"
]
},
"target": {
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-b557ef0b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee9adb7a45516cfa536ca92253d7ae59d56db9e4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"298111106247689692851167592287987751384",
"21509150187981739155835216636259920423",
"23773778897752090784551419834607460771",
"218379490680582416913514465576416385002",
"320257585964578185960660690507528381516",
"236296099011385206845524744825243444027"
]
},
"target": {
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-e1fb6459",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684c7372bbd6447c2e86a2a84e97a1478604d21f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"38723953932045244047738273550642360583",
"21509150187981739155835216636259920423",
"23773778897752090784551419834607460771",
"218379490680582416913514465576416385002",
"17057635290394484430550078540601332071",
"241758882071241850603719351551918846044"
]
},
"target": {
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-fa253e69",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@77d26c824aa5a7e0681ef1d5b75fe538d746addc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"298111106247689692851167592287987751384",
"21509150187981739155835216636259920423",
"23773778897752090784551419834607460771",
"218379490680582416913514465576416385002",
"320257585964578185960660690507528381516",
"236296099011385206845524744825243444027"
]
},
"target": {
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2023-53084-fe72826c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dede8c14a37a7ac458f9add56154a074ed78e7cf",
"digest": {
"threshold": 0.9,
"line_hashes": [
"298111106247689692851167592287987751384",
"21509150187981739155835216636259920423",
"23773778897752090784551419834607460771",
"218379490680582416913514465576416385002",
"320257585964578185960660690507528381516",
"236296099011385206845524744825243444027"
]
},
"target": {
"file": "drivers/gpu/drm/drm_gem_shmem_helper.c"
},
"signature_type": "Line",
"signature_version": "v1"
}
]