Use-After-Free Vulnerability in Linux Kernel Affecting Nouveau Connector Management

CVE-2023-53263

What is CVE-2023-53263?

A use-after-free vulnerability was identified in the handling of error situations related to the Nouveau connector within the Linux kernel. This issue arises during the cleanup process of the drm_connector_init function, where prematurely freeing memory allocated for the connector can lead to potential memory corruption. Although this fix addresses specific error handling scenarios, it may not resolve all related regressions stemming from previous commits that altered GPIO handling. Proper mitigation is essential to ensure system stability and security.

References