CVE-2023-53353
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
17/09/2025
Last modified:
14/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()<br />
<br />
The memory manager IDR is currently destroyed when user releases the<br />
file descriptor.<br />
However, at this point the user context might be still held, and memory<br />
buffers might be still in use.<br />
Later on, calls to release those buffers will fail due to not finding<br />
their handles in the IDR, leading to a memory leak.<br />
To avoid this leak, split the IDR destruction from the memory manager<br />
fini, and postpone it to hpriv_release() when there is no user context<br />
and no buffers are used.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.1 (including) | 6.3.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page