Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-53353

accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

Medium5.5EPSS 0.19%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release() The memory manager IDR is currently destroyed when user releases the file descriptor. However, at this point the user context might be still held, and memory buffers might be still in use. Later on, calls to release those buffers will fail due to not finding their handles in the IDR, leading to a memory leak. To avoid this leak, split the IDR destruction from the memory manager fini, and postpone it to hpriv_release() when there is no user context and no buffers are used.

Scores

CVSS scores of CVE-2023-53353, by who scored it
Scored byCVSSScoreVector
CISA-ADPADP (enrichment)3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.19% · top 91% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

Affected products

  • Linux · Linux

    • affected 0feaf86d4e69507ab9b2af7dcc63a6886352d5db – < c96cc6b46fdce89a8feb270a35bbe5086c142534
    • affected 0feaf86d4e69507ab9b2af7dcc63a6886352d5db – < 840de329ca99cafd0cdde9c6ac160b1330942aba
    • affected 0feaf86d4e69507ab9b2af7dcc63a6886352d5db – < 2e8e9a895c4589f124a37fc84d123b5114406e94

  • Linux · Linux

    • affected 5.1
    • unaffected < 5.1
    • unaffected 6.1.189 – ≤ 6.1.*
    • unaffected 6.3.4 – ≤ 6.3.*
    • unaffected 6.4 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-53353 badge
[![CVE-2023-53353](https://trackcve.app/badge/CVE-2023-53353.svg)](https://trackcve.app/cve/CVE-2023-53353)

Record last updated .