5.5

CVE-2023-53288: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2023-53288DEBIAN-CVE-2023-53288
Published 16-09-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2023-53288 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.7% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.15%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 17 · Related 15
RHSA-2023:7077RHSA-2024:2394SUSE-SU-2025:03600-1SUSE-SU-2025:03614-1SUSE-SU-2025:03615-1SUSE-SU-2025:03628-1

Timeline

  1. 16-09-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_modeset_probe When a new mode is set to modeset->mode, the previous mode should be freed. This fixes the following kmemleak report: drm_mode_duplicate+0x45/0x220 [drm] drm_client_modeset_probe+0x944/0xf50 [drm] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper] drm_client_register+0x169/0x240 [drm] ast_pci_probe+0x142/0x190 [ast] local_pci_probe+0xdc/0x180 work_for_cpu_fn+0x4e/0xa0 process_one_work+0x8b7/0x1540 worker_thread+0x70a/0xed0 kthread+0x29f/0x340 ret_from_fork+0x1f/0x30

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu124 products
  • linuxAll versions (No fix recorded) | < 5.4.0-166.183 | < 5.15.0-88.98
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1113.123 | < 5.15.0-1049.54
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ a2889606636d135148de101fe3311dfea67baf1c, < 5d580017bdb9b3e930b6009e467e5e1589f8ca8a | ≥ a2889606636d135148de101fe3311dfea67baf1c, < 5f2a12f64347f535c6ef55fa7eb36a2874d69b59 | ≥ a2889606636d135148de101fe3311dfea67baf1c, < 1369d0c586ad44f2d18fe2f4cbc5bcb24132fa71 | ≥ a2889606636d135148de101fe3311dfea67baf1c, < 917bef37cfaca07781c6fbaf6cd9404d27e64e6f | ≥ a2889606636d135148de101fe3311dfea67baf1c, < 8108a494639e56aea77e7196a1d6ea89792b9d4a | ≥ a2889606636d135148de101fe3311dfea67baf1c, < 2329cc7a101af1a844fbf706c0724c0baea38365 | 0cc98b5963f8886887aab0ded61970bdccfc2350 | ≥ 4.8.7, < 4.9 | 4.9
  • linux_kernel< 5.4.251 | ≥ 5.5, < 5.10.188 | ≥ 5.11, < 5.15.123 | ≥ 5.16, < 6.1.42 | ≥ 6.2, < 6.4.7 | 6.5:rc1 | 6.5:rc2
Debian1 product
  • linux< 6.1.52-1 | < 6.4.11-1

3 vendors · 127 products

References

10 links