01 Record

CVE-2023-53324

drm/msm/mdp5: Don't leak some plane state

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

drm/msm/mdp5: Don't leak some plane state

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.14% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 4.0% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-09-16 16:11Z1 YR AGO
Last updated: 2026-05-11 19:42Z5 MO AGO
Reserved: 2025-09-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Medium (CVSS 5.5)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: b49c0697500a7e1ba5326013704251968b53137a806b990e8f7c99b2d30ce7d6

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < 7fc11a830b2eb07a0e3c6f917e5e636df6fc5d4c, 21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < b8a61df6f40448cf46611f7af05b00970d08d620, 21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < 815e42029f6e1e762898079f85546d6a0391ab95, 21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < c0b1eee648702e04f1005d451f9689575b7f52ed, 21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < 2965015006ef18ca96d2eab9ebe6bca884c63291, 21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < 5b0dd3a102f64996598bd1e8d8388848a7c561bc, 21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < 12dfd02cbd1a678fbd66be0c2f79d5299c4921a9, 21a01abbe32a3cbeb903378a24e504bfd9fe0648 to < fd0ad3b2365c1c58aa5a761c18efc4817193beb6, 4.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7fc11a830b2eb07a0e3c6f917e5e636df6fc5d4c
git.kernel.orghttps://git.kernel.org/stable/c/b8a61df6f40448cf46611f7af05b00970d08d620
git.kernel.orghttps://git.kernel.org/stable/c/815e42029f6e1e762898079f85546d6a0391ab95
git.kernel.orghttps://git.kernel.org/stable/c/c0b1eee648702e04f1005d451f9689575b7f52ed
git.kernel.orghttps://git.kernel.org/stable/c/2965015006ef18ca96d2eab9ebe6bca884c63291
git.kernel.orghttps://git.kernel.org/stable/c/5b0dd3a102f64996598bd1e8d8388848a7c561bc
git.kernel.orghttps://git.kernel.org/stable/c/12dfd02cbd1a678fbd66be0c2f79d5299c4921a9
git.kernel.orghttps://git.kernel.org/stable/c/fd0ad3b2365c1c58aa5a761c18efc4817193beb6

07 Fixed in

Debian 12

linux
Fixed in 6.1.55-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.5.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.5.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.