CVE-2023-53353: accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()
In the Linux kernel, the following vulnerability has been resolved:
accel/habanalabs: postpone memmgr IDR destruction to hprivrelease()
The memory manager IDR is currently destroyed when user releases the file descriptor. However, at this point the user context might be still held, and memory buffers might be still in use. Later on, calls to release those buffers will fail due to not finding their handles in the IDR, leading to a memory leak. To avoid this leak, split the IDR destruction from the memory manager fini, and postpone it to hprivrelease() when there is no user context and no buffers are used.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53353?
CVE-2023-53353 is classified as a high severity vulnerability due to its potential impact on user memory management.
How do I fix CVE-2023-53353?
To fix CVE-2023-53353, update your Linux kernel to the latest stable version where the vulnerability has been patched.
What are the impacts of CVE-2023-53353?
The impacts of CVE-2023-53353 can include potential memory corruption, leading to denial of service or unauthorized access to resources.
Which versions of the Linux kernel are affected by CVE-2023-53353?
CVE-2023-53353 affects specific versions of the Linux kernel prior to the release that includes the patch.
Is CVE-2023-53353 exploitable remotely?
CVE-2023-53353 is not specifically noted as exploitable remotely but could potentially be exploited in local user contexts.