Home

Description

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create We can't simply free the connector after calling drm_connector_init on it. We need to clean up the drm side first. It might not fix all regressions from commit 2b5d1c29f6c4 ("drm/nouveau/disp: PIOR DP uses GPIO for HPD, not PMGR AUX interrupts"), but at least it fixes a memory corruption in error handling related to that commit.

PUBLISHED Reserved 2025-09-16 | Published 2025-09-16 | Updated 2025-09-16 | Assigner Linux

Product status

Default status
unaffected

95983aea80038539ebc70e41e73e9bb4eabd1a92 (git) before 3f27451c9f29d5ed00232968680c7838a44dcac7
affected

95983aea80038539ebc70e41e73e9bb4eabd1a92 (git) before 872feeecd08c81d212a52211d212897b8a857544
affected

95983aea80038539ebc70e41e73e9bb4eabd1a92 (git) before 1b254b791d7b7dea6e8adc887fbbd51746d8bb27
affected

Default status
affected

6.0
affected

Any version before 6.0
unaffected

6.1.47 (semver)
unaffected

6.4.12 (semver)
unaffected

6.5 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/3f27451c9f29d5ed00232968680c7838a44dcac7

git.kernel.org/...c/872feeecd08c81d212a52211d212897b8a857544

git.kernel.org/...c/1b254b791d7b7dea6e8adc887fbbd51746d8bb27

cve.org (CVE-2023-53263)

nvd.nist.gov (CVE-2023-53263)

Download JSON