Review reviewHigh

CVE-2023-54254

Linux

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Don't leak a resource on eviction error On eviction errors other than -EMULTIHOP we were leaking a resource. Fix. v2: - Avoid yet another goto (Andi Shyti)

CVSS: 7.8
EPSS: 0.13%
CISA KEV: Not listed
Published: 2025.12.30

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.13%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 403797925768d9fa870f5b1ebcd20016b397083b < 7738335d73d0686ec8995e0448e5d1b48cffb2a4, >= 403797925768d9fa870f5b1ebcd20016b397083b < e9c44738cb1f537b177cc1beabcf6913690460cd, >= 403797925768d9fa870f5b1ebcd20016b397083b < 6aea0032380bbb1efebd598ad733d16925167921, >= 403797925768d9fa870f5b1ebcd20016b397083b < e8188c461ee015ba0b9ab2fc82dbd5ebca5a5532, >= 6c68fbafb9cd13e13476043fd9f6e10f792f685a, >= 5.14.6 < 5.15, >= 5.15
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: Not available