CVE-2023-53378

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-53378
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53378.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53378
Downstream
Related
Published
2025-09-18T13:33:23Z
Modified
2025-10-15T06:45:19.587189Z
Summary
drm/i915/dpt: Treat the DPT BO as a framebuffer
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/dpt: Treat the DPT BO as a framebuffer

Currently i915gemobjectisframebuffer() doesn't treat the BO containing the framebuffer's DPT as a framebuffer itself. This means eg. that the shrinker can evict the DPT BO while leaving the actual FB BO bound, when the DPT is allocated from regular shmem.

That causes an immediate oops during hibernate as we try to rewrite the PTEs inside the already evicted DPT obj.

TODO: presumably this might also be the reason for the DPT related display faults under heavy memory pressure, but I'm still not sure how that would happen as the object should be pinned by inteldptpin() while in active use by the display engine...

(cherry picked from commit 779cb5ba64ec7df80675a956c9022929514f517a)

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0dc987b699ce4266450d407d6d79d41eab88c5d0
Fixed
c781c107731fc09ce4330c8c636b8446d0f72aa4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0dc987b699ce4266450d407d6d79d41eab88c5d0
Fixed
5390a02b4508416b9bee96674f141c68f89bafbc
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0dc987b699ce4266450d407d6d79d41eab88c5d0
Fixed
3413881e1ecc3cba722a2e87ec099692eed5be28

Affected versions

v5.*

v5.18
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.3
v6.1.4
v6.1.5
v6.1.6
v6.1.7
v6.1.8
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.2.1
v6.2.2
v6.2.3
v6.2.4
v6.2.5
v6.2.6
v6.2.7
v6.2.8
v6.2.9
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4

Database specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "line_hashes": [
                    "288643988322962786785598417744507101348",
                    "265891938441390736545717394857170881239",
                    "295592720380009929153278829333593452170"
                ],
                "threshold": 0.9
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5390a02b4508416b9bee96674f141c68f89bafbc",
            "signature_type": "Line",
            "target": {
                "file": "drivers/gpu/drm/i915/gem/i915_gem_object_types.h"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-46440566"
        },
        {
            "digest": {
                "line_hashes": [
                    "316041160416576515259655427893402423698",
                    "181313231027217567907710827085468238274",
                    "274578882017964024982871181396178927030",
                    "50130754955019463015428197288171958159"
                ],
                "threshold": 0.9
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3413881e1ecc3cba722a2e87ec099692eed5be28",
            "signature_type": "Line",
            "target": {
                "file": "drivers/gpu/drm/i915/gem/i915_gem_object.h"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-4af56d44"
        },
        {
            "digest": {
                "length": 99.0,
                "function_hash": "229764165723674290075348617067186413267"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3413881e1ecc3cba722a2e87ec099692eed5be28",
            "signature_type": "Function",
            "target": {
                "function": "i915_gem_object_is_framebuffer",
                "file": "drivers/gpu/drm/i915/gem/i915_gem_object.h"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-4eba1939"
        },
        {
            "digest": {
                "line_hashes": [
                    "316041160416576515259655427893402423698",
                    "181313231027217567907710827085468238274",
                    "274578882017964024982871181396178927030",
                    "50130754955019463015428197288171958159"
                ],
                "threshold": 0.9
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5390a02b4508416b9bee96674f141c68f89bafbc",
            "signature_type": "Line",
            "target": {
                "file": "drivers/gpu/drm/i915/gem/i915_gem_object.h"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-53739c0d"
        },
        {
            "digest": {
                "length": 101.0,
                "function_hash": "100179215838378592225225677184824983651"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3413881e1ecc3cba722a2e87ec099692eed5be28",
            "signature_type": "Function",
            "target": {
                "function": "intel_dpt_destroy",
                "file": "drivers/gpu/drm/i915/display/intel_dpt.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-546140f7"
        },
        {
            "digest": {
                "line_hashes": [
                    "288643988322962786785598417744507101348",
                    "265891938441390736545717394857170881239",
                    "295592720380009929153278829333593452170"
                ],
                "threshold": 0.9
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3413881e1ecc3cba722a2e87ec099692eed5be28",
            "signature_type": "Line",
            "target": {
                "file": "drivers/gpu/drm/i915/gem/i915_gem_object_types.h"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-6beb7d8d"
        },
        {
            "digest": {
                "length": 1607.0,
                "function_hash": "295566158090550036566975381491390943118"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5390a02b4508416b9bee96674f141c68f89bafbc",
            "signature_type": "Function",
            "target": {
                "function": "intel_dpt_create",
                "file": "drivers/gpu/drm/i915/display/intel_dpt.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-6c602437"
        },
        {
            "digest": {
                "length": 1607.0,
                "function_hash": "295566158090550036566975381491390943118"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3413881e1ecc3cba722a2e87ec099692eed5be28",
            "signature_type": "Function",
            "target": {
                "function": "intel_dpt_create",
                "file": "drivers/gpu/drm/i915/display/intel_dpt.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-cfeafd27"
        },
        {
            "digest": {
                "line_hashes": [
                    "50788200053483860924616372738770210503",
                    "66104230612906350339045706998942717559",
                    "80423708012756463420853333845573909772",
                    "268665809577180139435279614141350416547",
                    "207730998450377358878398857710309756131",
                    "269678937822889494633561606716755724939"
                ],
                "threshold": 0.9
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3413881e1ecc3cba722a2e87ec099692eed5be28",
            "signature_type": "Line",
            "target": {
                "file": "drivers/gpu/drm/i915/display/intel_dpt.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-d36c0d32"
        },
        {
            "digest": {
                "length": 99.0,
                "function_hash": "229764165723674290075348617067186413267"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5390a02b4508416b9bee96674f141c68f89bafbc",
            "signature_type": "Function",
            "target": {
                "function": "i915_gem_object_is_framebuffer",
                "file": "drivers/gpu/drm/i915/gem/i915_gem_object.h"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-efb5c147"
        },
        {
            "digest": {
                "line_hashes": [
                    "50788200053483860924616372738770210503",
                    "66104230612906350339045706998942717559",
                    "80423708012756463420853333845573909772",
                    "268665809577180139435279614141350416547",
                    "207730998450377358878398857710309756131",
                    "269678937822889494633561606716755724939"
                ],
                "threshold": 0.9
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5390a02b4508416b9bee96674f141c68f89bafbc",
            "signature_type": "Line",
            "target": {
                "file": "drivers/gpu/drm/i915/display/intel_dpt.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-fc2b386b"
        },
        {
            "digest": {
                "length": 101.0,
                "function_hash": "100179215838378592225225677184824983651"
            },
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5390a02b4508416b9bee96674f141c68f89bafbc",
            "signature_type": "Function",
            "target": {
                "function": "intel_dpt_destroy",
                "file": "drivers/gpu/drm/i915/display/intel_dpt.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2023-53378-fd584dbb"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.1.23
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.10