In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_modeset_probe When a new mode is set to modeset->mode, the previous mode should be freed. This fixes the following kmemleak report: drm_mode_duplicate+0x45/0x220 [drm] drm_client_modeset_probe+0x944/0xf50 [drm] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper] drm_client_register+0x169/0x240 [drm] ast_pci_probe+0x142/0x190 [ast] local_pci_probe+0xdc/0x180 work_for_cpu_fn+0x4e/0xa0 process_one_work+0x8b7/0x1540 worker_thread+0x70a/0xed0 kthread+0x29f/0x340 ret_from_fork+0x1f/0x30

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/1369d0c586ad44f2d18fe2f4cbc5bcb24132fa71 cve-icon cve-icon
https://git.kernel.org/stable/c/2329cc7a101af1a844fbf706c0724c0baea38365 cve-icon cve-icon
https://git.kernel.org/stable/c/5d580017bdb9b3e930b6009e467e5e1589f8ca8a cve-icon cve-icon
https://git.kernel.org/stable/c/5f2a12f64347f535c6ef55fa7eb36a2874d69b59 cve-icon cve-icon
https://git.kernel.org/stable/c/8108a494639e56aea77e7196a1d6ea89792b9d4a cve-icon cve-icon
https://git.kernel.org/stable/c/917bef37cfaca07781c6fbaf6cd9404d27e64e6f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091625-CVE-2023-53288-b799@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53288 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53288 cve-icon
History

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 17 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 16 Sep 2025 08:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_modeset_probe When a new mode is set to modeset->mode, the previous mode should be freed. This fixes the following kmemleak report: drm_mode_duplicate+0x45/0x220 [drm] drm_client_modeset_probe+0x944/0xf50 [drm] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper] drm_client_register+0x169/0x240 [drm] ast_pci_probe+0x142/0x190 [ast] local_pci_probe+0xdc/0x180 work_for_cpu_fn+0x4e/0xa0 process_one_work+0x8b7/0x1540 worker_thread+0x70a/0xed0 kthread+0x29f/0x340 ret_from_fork+0x1f/0x30
Title drm/client: Fix memory leak in drm_client_modeset_probe
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-16T08:11:21.150Z

Updated: 2025-09-16T08:11:21.150Z

Reserved: 2025-09-16T08:09:37.992Z

Link: CVE-2023-53288

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-16T08:15:37.940

Modified: 2025-09-16T12:49:16.060

Link: CVE-2023-53288

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-16T00:00:00Z

Links: CVE-2023-53288 - Bugzilla