DEBIAN-CVE-2023-53453

Source
https://security-tracker.debian.org/tracker/CVE-2023-53453
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53453.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2023-53453
Upstream
Published
2025-10-01T12:15:43.787Z
Modified
2026-03-11T07:36:25.190981Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload radeon driver: unreferenced object 0xffff9f8608ede200 (size 512): comm "systemd-udevd", pid 326, jiffies 4294682822 (age 716.338s) hex dump (first 32 bytes): 00 00 00 00 c4 aa ec aa 14 ab 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000062fadebe>] kmemcachealloctrace+0x2f1/0x500 [<00000000b6883cea>] atomparse+0x117/0x230 [radeon] [<00000000158c23fd>] radeonatombiosinit+0xab/0x170 [radeon] [<00000000683f672e>] siinit+0x57/0x750 [radeon] [<00000000566cc31f>] radeondeviceinit+0x559/0x9c0 [radeon] [<0000000046efabb3>] radeondriverloadkms+0xc1/0x1a0 [radeon] [<00000000b5155064>] drmdevregister+0xdd/0x1d0 [<0000000045fec835>] radeonpciprobe+0xbd/0x100 [radeon] [<00000000e69ecca3>] pcideviceprobe+0xe1/0x160 [<0000000019484b76>] really_probe.part.0+0xc1/0x2c0 [<000000003f2649da>] __driverprobedevice+0x96/0x130 [<00000000231c5bb1>] driverprobedevice+0x24/0xf0 [<0000000000a42377>] __driverattach+0x77/0x190 [<00000000d7574da6>] busforeachdev+0x7f/0xd0 [<00000000633166d2>] driverattach+0x1e/0x30 [<00000000313b05b8>] busadddriver+0x12c/0x1e0 iio was allocated in atomindexiio() called by atomparse(), but it doesn't got released when the dirver is shutdown. Fix this kmemleak by free it in radeonatombiosfini().

References

Affected packages

Debian:11 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.10.178-1

Affected versions

5.*
5.10.46-4
5.10.46-5
5.10.70-1~bpo10+1
5.10.70-1
5.10.84-1
5.10.92-1~bpo10+1
5.10.92-1
5.10.92-2
5.10.103-1~bpo10+1
5.10.103-1
5.10.106-1
5.10.113-1
5.10.120-1~bpo10+1
5.10.120-1
5.10.127-1
5.10.127-2~bpo10+1
5.10.127-2
5.10.136-1
5.10.140-1
5.10.148-1
5.10.149-1
5.10.149-2
5.10.158-1
5.10.158-2
5.10.162-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53453.json"

Debian:12 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.20-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53453.json"

Debian:13 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.20-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53453.json"

Debian:14 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.20-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source
"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53453.json"