01 Record

CVE-2023-53388

drm/mediatek: Clean dangling pointer on bind error path

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

drm/mediatek: Clean dangling pointer on bind error path

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.15% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 4.7% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-18 13:33Z1 YR AGO

Last updated

2026-08-05 09:13Z2 MO AGO

Reserved

2025-09-17

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

307a0a1de23f3d03532a751aea83cf8c5de277d6ca3002d8884f2c15e133b154

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux119f5173628aa7a0c3cf9db83460d40709e8241d to < 9a48f99aa7bea15e0b1d8b0040c46b4792eddf3b, 119f5173628aa7a0c3cf9db83460d40709e8241d to < a161f1d92aabb3b8463f752bdc3474dc3a5ec0e5, 119f5173628aa7a0c3cf9db83460d40709e8241d to < 6a89ddee1686a8872384aaa9f0bcfa6b675acd86, 119f5173628aa7a0c3cf9db83460d40709e8241d to < 49cf87919daeeeeeb9e924c39bdd9203af434461, 119f5173628aa7a0c3cf9db83460d40709e8241d to < 7b551a501fa714890e55bae73efede1185728d72, 119f5173628aa7a0c3cf9db83460d40709e8241d to < f3887c771576c5d740c5c5b8bf654a8ab8020b7d, 119f5173628aa7a0c3cf9db83460d40709e8241d to < 36aa8c61af55675ed967900fbe5deb32d776f051, 4.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9a48f99aa7bea15e0b1d8b0040c46b4792eddf3b
git.kernel.orghttps://git.kernel.org/stable/c/a161f1d92aabb3b8463f752bdc3474dc3a5ec0e5
git.kernel.orghttps://git.kernel.org/stable/c/6a89ddee1686a8872384aaa9f0bcfa6b675acd86
git.kernel.orghttps://git.kernel.org/stable/c/49cf87919daeeeeeb9e924c39bdd9203af434461
git.kernel.orghttps://git.kernel.org/stable/c/7b551a501fa714890e55bae73efede1185728d72
git.kernel.orghttps://git.kernel.org/stable/c/f3887c771576c5d740c5c5b8bf654a8ab8020b7d
git.kernel.orghttps://git.kernel.org/stable/c/36aa8c61af55675ed967900fbe5deb32d776f051

07 Fixed in

Debian 12

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.