Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-53314— fbdev/ep93xx-fb: Do not assign to struct fb_info.dev

EPSS 0.02% · P4

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinux88017bda96a5fd568a982b01546c8fb1782dda62< ffdf2b020db717853167391a3a8d912e13428fa6affected
88017bda96a5fd568a982b01546c8fb1782dda62< 1c6ff2a7c593db851f23e31ace2baf557ea9d0ffaffected
88017bda96a5fd568a982b01546c8fb1782dda62< 8ffa40ff64aa43a9a28fcf209b48d86a3e0f4972affected
88017bda96a5fd568a982b01546c8fb1782dda62< 4aade6c9100a3537788b6a9c7ac481037d19efdfaffected
88017bda96a5fd568a982b01546c8fb1782dda62< 309c27162afea79b3c7f8747bb650faf6923b639affected
88017bda96a5fd568a982b01546c8fb1782dda62< f83c1b13f8154e0284448912756d0a351a1a602aaffected
88017bda96a5fd568a982b01546c8fb1782dda62< 0517fc5a71333b315164736bbd32608894fbb872affected
88017bda96a5fd568a982b01546c8fb1782dda62< f90a0e5265b60cdd3c77990e8105f79aa2fac994affected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-53314

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fb_info.dev Do not assing the Linux device to struct fb_info.dev. The call to register_framebuffer() initializes the field to the fbdev device. Drivers should not override its value. Fixes a bug where the driver incorrectly decreases the hardware device's reference counter and leaks the fbdev device. v2: * add Fixes tag (Dan)
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于错误分配struct fb_info.dev,可能导致硬件设备引用计数器错误减少和fbdev设备泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 88017bda96a5fd568a982b01546c8fb1782dda62 ~ ffdf2b020db717853167391a3a8d912e13428fa6 -
LinuxLinux 2.6.32 -

II. Public POCs for CVE-2023-53314

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53314

登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-16 · 115 CVEs total

CVE-2022-50339Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()
CVE-2023-53305Bluetooth: L2CAP: Fix use-after-free
CVE-2023-53304netfilter: nft_set_rbtree: fix overlap expiration walk
CVE-2022-50351cifs: Fix xid leak in cifs_create()
CVE-2022-50352net: hns: fix possible memory leak in hnae_ae_register()
CVE-2022-50350scsi: target: iscsi: Fix a race condition between login_work and the login thread
CVE-2022-50348nfsd: Fix a memory leak in an error handling path
CVE-2022-50349misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
CVE-2022-50347mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
CVE-2022-50346ext4: init quota for 'old.inode' in 'ext4_rename'
CVE-2022-50343rapidio: fix possible name leaks when rio_add_device() fails
CVE-2022-50344ext4: fix null-ptr-deref in ext4_write_info
CVE-2022-50342floppy: Fix memory leak in do_floppy_init()
CVE-2022-50341cifs: fix oops during encryption
CVE-2022-50340media: vimc: Fix wrong function called when vimc_init() fails
CVE-2025-39826net: rose: convert 'use' field to refcount_t
CVE-2025-39829trace/fgraph: Fix the warning caused by missing unregister notifier
CVE-2025-39828atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
CVE-2025-39827net: rose: include node references in rose_neigh refcount
CVE-2025-39830net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path

Showing top 20 of 115 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2023-53314

No comments yet


Leave a comment