Review reviewHigh

CVE-2023-53084

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drm_gem_shmem_mmap() doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free.

CVSS: 7.8
EPSS: 0.19%
CISA KEV: Not listed
Published: 2025.05.03

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.19%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < 684c7372bbd6447c2e86a2a84e97a1478604d21f, >= f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < 5cfb617967b05f8f27e862c97db1fabd8485f4db, >= f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < dede8c14a37a7ac458f9add56154a074ed78e7cf, >= f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < 77d26c824aa5a7e0681ef1d5b75fe538d746addc, >= f49a51bfdc8ea717c97ccd4cc98b7e6daaa5553a < ee9adb7a45516cfa536ca92253d7ae59d56db9e4, >= 4655afcf0e3874af03afff8c8704b52350bdba47, >= 5.9.5 < 5.10, >= 5.10, >= 5.10.1 < 5.10.176, >= 5.11 < 5.15.104, >= 5.16 < 6.1.21, >= 6.2 < 6.2.8, 5.10, 6.3
Fixed versions: 5.10, 5.10.176, 5.15.104, 6.1.21, 6.2.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416