SB20250916414 - Memory leak in Linux kernel video fbdev driver
Published: September 16, 2025 Updated: September 22, 2025
Security Bulletin ID
SB20250916414
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2023-53314)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the ep93xxfb_probe() function in drivers/video/fbdev/ep93xx-fb.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0517fc5a71333b315164736bbd32608894fbb872
- https://git.kernel.org/stable/c/1c6ff2a7c593db851f23e31ace2baf557ea9d0ff
- https://git.kernel.org/stable/c/309c27162afea79b3c7f8747bb650faf6923b639
- https://git.kernel.org/stable/c/4aade6c9100a3537788b6a9c7ac481037d19efdf
- https://git.kernel.org/stable/c/8ffa40ff64aa43a9a28fcf209b48d86a3e0f4972
- https://git.kernel.org/stable/c/f83c1b13f8154e0284448912756d0a351a1a602a
- https://git.kernel.org/stable/c/f90a0e5265b60cdd3c77990e8105f79aa2fac994
- https://git.kernel.org/stable/c/ffdf2b020db717853167391a3a8d912e13428fa6
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.326