Information Leak in Linux Kernel's Graphics Driver Component

CVE-2023-53324

What is CVE-2023-53324?

A vulnerability in the Linux kernel's graphics driver component, specifically within the drm/msm/mdp5 subsystem, allows for the unintentional leakage of plane state information. This issue stems from improper handling of the plane_state->commit reference count, which can lead to sensitive data exposure. The vulnerability was introduced when the reference tracking mechanism was modified, highlighting the necessity of using appropriate helpers to prevent such leaks. A patch has been made available to address this issue, ensuring better management of state within the graphics processing framework.

References