Linux Kernel Vulnerability Affecting Ep93xx Framebuffer Device

CVE-2023-53314

What is CVE-2023-53314?

A vulnerability in the Linux kernel's ep93xx framebuffer device involves the incorrect assignment to struct fb_info.dev. This flaw leads to the registration of framebuffer devices incorrectly modifying the device reference count, causing potential leaks in the fbdev device. Specifically, when the field fb_info.dev is assigned a value by the driver, it should not be overridden, as this affects device management and may compromise system stability and resource allocation.

References