CVE-2023-53263
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-53263
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53263.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-53263
- Downstream
- Related
- Published
- 2025-09-16T08:06:53Z
- Modified
- 2025-10-21T16:23:18.208946Z
- Summary
- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau/disp: fix use-after-free in error handling of nouveauconnectorcreate
We can't simply free the connector after calling drmconnectorinit on it. We need to clean up the drm side first.
It might not fix all regressions from commit 2b5d1c29f6c4 ("drm/nouveau/disp: PIOR DP uses GPIO for HPD, not PMGR AUX interrupts"), but at least it fixes a memory corruption in error handling related to that commit.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced95983aea80038539ebc70e41e73e9bb4eabd1a92Fixed3f27451c9f29d5ed00232968680c7838a44dcac7
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced95983aea80038539ebc70e41e73e9bb4eabd1a92Fixed872feeecd08c81d212a52211d212897b8a857544
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced95983aea80038539ebc70e41e73e9bb4eabd1a92Fixed1b254b791d7b7dea6e8adc887fbbd51746d8bb27
Affected versions
v5.*
v5.19
v5.19-rc7
v5.19-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.5
v6.1.6
v6.1.7
v6.1.8
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.4.1
v6.4.10
v6.4.11
v6.4.2
v6.4.3
v6.4.4
v6.4.5
v6.4.6
v6.4.7
v6.4.8
v6.4.9
v6.5-rc1
Database specific
vanir_signatures
[
{
"signature_type": "Function",
"digest": {
"function_hash": "49807677459022891560216302955580347765",
"length": 4818.0
},
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_connector.c",
"function": "nouveau_connector_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f27451c9f29d5ed00232968680c7838a44dcac7",
"id": "CVE-2023-53263-5955f19f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11410340262809315030034043059120432008",
"56402248805293664320408886940056233924",
"41045797975913290221999932360896055772",
"337282752093895504389993651518404828617",
"132482628629067061666637264217356100853",
"325525845373040379943267238421488634693",
"210835358099016880000025021867009210409",
"7289214573035605334599794231768172525",
"169338253011288314090679459827564348776",
"176974729962068517801107739543722395649",
"324626539394558209790264351974946744165",
"188840181253501888831493829847804619304"
]
},
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_connector.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@872feeecd08c81d212a52211d212897b8a857544",
"id": "CVE-2023-53263-5d07f387",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11410340262809315030034043059120432008",
"56402248805293664320408886940056233924",
"41045797975913290221999932360896055772",
"169338253011288314090679459827564348776",
"314838406539883336752843026390603166509",
"18904637329053433262372085120376423",
"18283020080290453904099645828196199300"
]
},
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_connector.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f27451c9f29d5ed00232968680c7838a44dcac7",
"id": "CVE-2023-53263-6466a3d1",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "80698541942044752358784701586180478137",
"length": 4958.0
},
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_connector.c",
"function": "nouveau_connector_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b254b791d7b7dea6e8adc887fbbd51746d8bb27",
"id": "CVE-2023-53263-ac6bbaad",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "80698541942044752358784701586180478137",
"length": 4958.0
},
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_connector.c",
"function": "nouveau_connector_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@872feeecd08c81d212a52211d212897b8a857544",
"id": "CVE-2023-53263-daac6c96",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11410340262809315030034043059120432008",
"56402248805293664320408886940056233924",
"41045797975913290221999932360896055772",
"337282752093895504389993651518404828617",
"132482628629067061666637264217356100853",
"325525845373040379943267238421488634693",
"210835358099016880000025021867009210409",
"7289214573035605334599794231768172525",
"169338253011288314090679459827564348776",
"176974729962068517801107739543722395649",
"324626539394558209790264351974946744165",
"188840181253501888831493829847804619304"
]
},
"target": {
"file": "drivers/gpu/drm/nouveau/nouveau_connector.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b254b791d7b7dea6e8adc887fbbd51746d8bb27",
"id": "CVE-2023-53263-eec53e90",
"deprecated": false,
"signature_version": "v1"
}
]