NetSight
high7.8

CVE-2023-53314

In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fb_info.dev Do not assing the Linux device to stru…

Impact

In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fb_info.dev Do not assing the Linux device to struct fb_info.dev. The call to register_framebuffer() initializes the field to the fbdev device. Drivers should not override its value. Fixes a bug where the driver incorrectly decreases the hardware device's reference counter and leaks the fbdev device. v2: * add Fixes tag (Dan)

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 before 4.14.326
from 4.15 before 4.19.295
from 4.20 before 5.4.257
from 5.5 before 5.10.195
from 5.11 before 5.15.132
from 5.16 before 6.1.54

References