{"id":"CVE-2023-54091","state":"PUBLISHED","title":"drm/client: Fix memory leak in drm_client_target_cloned","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/client: Fix memory leak in drm_client_target_cloned\n\ndmt_mode is allocated and never freed in this function.\nIt was found with the ast driver, but most drivers using generic fbdev\nsetup are probably affected.\n\nThis fixes the following kmemleak report:\n  backtrace:\n    [<00000000b391296d>] drm_mode_duplicate+0x45/0x220 [drm]\n    [<00000000e45bb5b3>] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]\n    [<00000000ed2d3a37>] drm_client_modeset_probe+0x6bd/0xf50 [drm]\n    [<0000000010e5cc9d>] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]\n    [<00000000909f82ca>] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]\n    [<00000000063a69aa>] drm_client_register+0x169/0x240 [drm]\n    [<00000000a8c61525>] ast_pci_probe+0x142/0x190 [ast]\n    [<00000000987f19bb>] local_pci_probe+0xdc/0x180\n    [<000000004fca231b>] work_for_cpu_fn+0x4e/0xa0\n    [<0000000000b85301>] process_one_work+0x8b7/0x1540\n    [<000000003375b17c>] worker_thread+0x70a/0xed0\n    [<00000000b0d43cd9>] kthread+0x29f/0x340\n    [<000000008d770833>] ret_from_fork+0x1f/0x30\nunreferenced object 0xff11000333089a00 (size 128):","publishedAt":"2025-12-24T13:06:20.376Z","updatedAt":"2026-05-11T19:55:19.060Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"d3009700f48602b557eade1f22c98b6bc20247e8","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"a4b978249e8fa94956fce8b70a709f7797716f62","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"52daf6ba2e0d201640cb1ce42049c5c4426b4d6e","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"105275879a80503686a8108af2f5c579a1c5aef4","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"a85e23a1ef63e45a18f0a30d7816fcb4a865ca95","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"b5359d7a5087ac398fc429da6833133b4784c268","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"4b596a6e2d2e0f9c14e4122506dd715f43fcd727","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"c2a88e8bdf5f6239948d75283d0ae7e0c7945b03","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/drm_client_modeset.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.35","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.35","versionType":"semver"},{"version":"4.14.322","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.291","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.251","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.188","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.123","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.42","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.7","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/drm_client_modeset.c"]}],"references":["https://git.kernel.org/stable/c/d3009700f48602b557eade1f22c98b6bc20247e8","https://git.kernel.org/stable/c/a4b978249e8fa94956fce8b70a709f7797716f62","https://git.kernel.org/stable/c/52daf6ba2e0d201640cb1ce42049c5c4426b4d6e","https://git.kernel.org/stable/c/105275879a80503686a8108af2f5c579a1c5aef4","https://git.kernel.org/stable/c/a85e23a1ef63e45a18f0a30d7816fcb4a865ca95","https://git.kernel.org/stable/c/b5359d7a5087ac398fc429da6833133b4784c268","https://git.kernel.org/stable/c/4b596a6e2d2e0f9c14e4122506dd715f43fcd727","https://git.kernel.org/stable/c/c2a88e8bdf5f6239948d75283d0ae7e0c7945b03"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/54xxx/CVE-2023-54091.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-54091","state":"PUBLISHED","datePublished":"2025-12-24T13:06:20.376Z","dateUpdated":"2026-05-11T19:55:19.060Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-24T13:02:52.516Z"},"containers":{"cna":{"title":"drm/client: Fix memory leak in drm_client_target_cloned","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/client: Fix memory leak in drm_client_target_cloned\n\ndmt_mode is allocated and never freed in this function.\nIt was found with the ast driver, but most drivers using generic fbdev\nsetup are probably affected.\n\nThis fixes the following kmemleak report:\n  backtrace:\n    [<00000000b391296d>] drm_mode_duplicate+0x45/0x220 [drm]\n    [<00000000e45bb5b3>] drm_client_target_cloned.constprop.0+0x27b/0x480 [drm]\n    [<00000000ed2d3a37>] drm_client_modeset_probe+0x6bd/0xf50 [drm]\n    [<0000000010e5cc9d>] __drm_fb_helper_initial_config_and_unlock+0xb4/0x2c0 [drm_kms_helper]\n    [<00000000909f82ca>] drm_fbdev_client_hotplug+0x2bc/0x4d0 [drm_kms_helper]\n    [<00000000063a69aa>] drm_client_register+0x169/0x240 [drm]\n    [<00000000a8c61525>] ast_pci_probe+0x142/0x190 [ast]\n    [<00000000987f19bb>] local_pci_probe+0xdc/0x180\n    [<000000004fca231b>] work_for_cpu_fn+0x4e/0xa0\n    [<0000000000b85301>] process_one_work+0x8b7/0x1540\n    [<000000003375b17c>] worker_thread+0x70a/0xed0\n    [<00000000b0d43cd9>] kthread+0x29f/0x340\n    [<000000008d770833>] ret_from_fork+0x1f/0x30\nunreferenced object 0xff11000333089a00 (size 128):"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"d3009700f48602b557eade1f22c98b6bc20247e8","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"a4b978249e8fa94956fce8b70a709f7797716f62","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"52daf6ba2e0d201640cb1ce42049c5c4426b4d6e","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"105275879a80503686a8108af2f5c579a1c5aef4","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"a85e23a1ef63e45a18f0a30d7816fcb4a865ca95","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"b5359d7a5087ac398fc429da6833133b4784c268","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"4b596a6e2d2e0f9c14e4122506dd715f43fcd727","versionType":"git"},{"version":"1d42bbc8f7f9ce4d852692ef7aa336b133b0830a","status":"affected","lessThan":"c2a88e8bdf5f6239948d75283d0ae7e0c7945b03","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/drm_client_modeset.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.35","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.35","versionType":"semver"},{"version":"4.14.322","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.291","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.251","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.188","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.123","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.42","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.7","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/drm_client_modeset.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/d3009700f48602b557eade1f22c98b6bc20247e8"},{"url":"https://git.kernel.org/stable/c/a4b978249e8fa94956fce8b70a709f7797716f62"},{"url":"https://git.kernel.org/stable/c/52daf6ba2e0d201640cb1ce42049c5c4426b4d6e"},{"url":"https://git.kernel.org/stable/c/105275879a80503686a8108af2f5c579a1c5aef4"},{"url":"https://git.kernel.org/stable/c/a85e23a1ef63e45a18f0a30d7816fcb4a865ca95"},{"url":"https://git.kernel.org/stable/c/b5359d7a5087ac398fc429da6833133b4784c268"},{"url":"https://git.kernel.org/stable/c/4b596a6e2d2e0f9c14e4122506dd715f43fcd727"},{"url":"https://git.kernel.org/stable/c/c2a88e8bdf5f6239948d75283d0ae7e0c7945b03"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:55:19.060Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"4.14.322"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"4.19.291"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"5.4.251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"5.10.188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"5.15.123"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"6.1.42"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"6.4.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.35","versionEndExcluding":"6.5"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}