CVE-2023-53501
iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind When unbinding pasid - a race condition exists vs outstanding page faults. To prevent this, the pasid_state object contains a refcount. * set to 1 on pasid bind * incremented on each ppr notification start * decremented on each ppr notification done * decremented on pasid unbind Since refcount_dec assumes that refcount will never reach 0: the current implementation causes the following to be invoked on pasid unbind: REFCOUNT_WARN("decrement hit 0; leaking memory") Fix this issue by changing refcount_dec to refcount_dec_and_test to explicitly handle refcount=1.
Timeline
ID reserved
By Linux
Published
- 7 months later
· 7 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium4.7 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.15% · top 96% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.7.
Affected products
- affected 8bc54824da4e8fcf0ed679cf09ac32f23d83254a – < a50d60b8f2aff46dd7c7edb4a5835cdc4d432c22
- affected 8bc54824da4e8fcf0ed679cf09ac32f23d83254a – < 13ed255248dfbbb7f23f9170c7a537fb9ca22c73
- affected 8bc54824da4e8fcf0ed679cf09ac32f23d83254a – < 9ccc51be3126b25cfe9351dbffde946c925cc28a
- affected 8bc54824da4e8fcf0ed679cf09ac32f23d83254a – < 98d86bf32187db27946ca817c2467a5f2f7aa02f
- affected 8bc54824da4e8fcf0ed679cf09ac32f23d83254a – < 534103bcd52ca9c1fecbc70e717b4a538dc4ded8
- affected 5.15
- unaffected < 5.15
- unaffected 5.15.132 – ≤ 5.15.*
- unaffected 6.1.53 – ≤ 6.1.*
- unaffected 6.4.16 – ≤ 6.4.*
- unaffected 6.5.3 – ≤ 6.5.*
- unaffected 6.6 – ≤ *
References (5)
- https://git.kernel.org/stable/c/a50d60b8f2aff46dd7c7edb4a5835cdc4d432c22 (opens in a new tab)
- https://git.kernel.org/stable/c/13ed255248dfbbb7f23f9170c7a537fb9ca22c73 (opens in a new tab)
- https://git.kernel.org/stable/c/9ccc51be3126b25cfe9351dbffde946c925cc28a (opens in a new tab)
- https://git.kernel.org/stable/c/98d86bf32187db27946ca817c2467a5f2f7aa02f (opens in a new tab)
- https://git.kernel.org/stable/c/534103bcd52ca9c1fecbc70e717b4a538dc4ded8 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53501)Record last updated .