CVE-2023-54254

CVE-2023-54254 is a memory leak vulnerability in the Linux kernel's TTM (Translation Table Manager) subsystem within the drm framework. When an eviction operation fails with an error code other than -EMULTIHOP, the code path fails to release a previously allocated resource, causing a leak [1][2].

The vulnerability can be triggered by an attacker who can cause eviction errors during memory management operations. No authentication is required if the attacker can influence memory pressure or submit GPU workloads that lead to eviction failures. The attack surface is local, requiring access to the DRM subsystem, typically via a graphics device.

If repeatedly triggered, the resource leak can lead to memory exhaustion, potentially causing denial of service (system hang or crash) due to depleted kernel memory pools [1].

The fix was applied to the stable Linux kernel branches via commits e8188c461ee0 and 6aea0032380b [1][2]. Users should update to the latest kernel version containing these commits.