CVE-2023-53844

A memory leak vulnerability exists in the Linux kernel's Direct Rendering Manager (DRM) Translation Table Manager (TTM) subsystem. When a buffer object (BO) is moved to system memory for swapout and the operation fails, the associated resource is not properly freed, leading to a resource leak [1].

The vulnerability can be triggered when the system attempts to swap out a BO, such as under memory pressure, but the move operation fails due to, for example, an allocation error or other hardware-related issues. An attacker with local access and the ability to trigger such swapout failures could exploit this to exhaust system resources [2].

The impact is a memory leak that can gradually deplete available kernel memory, potentially leading to denial of service (DoS) conditions. No privilege escalation or data leak is reported.

The fix has been applied in the Linux kernel stable branches. Users are advised to update to the latest stable kernel versions to mitigate this issue [1][2].