CVE-2023-53378 drm/i915/dpt: Treat the DPT BO as a framebuffer
A flaw in the Linux kernel's i915 driver allows a local attacker to cause a system crash during hibernation by triggering a null pointer dereference.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53378?
CVE-2023-53378 is a high-severity vulnerability in Linux kernel, published on 18 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/dpt: Treat the DPT BO as a framebuffer
Currently i915_gem_object_is_framebuffer() doesn't treat the BO containing the framebuffer's DPT as a framebuffer itself. This means eg. that the shrinker can evict the DPT BO while leaving the actual FB BO bound, when the DPT is allocated from regular shmem.
That causes an immediate oops during hibernate as we try to rewrite the PTEs inside the already evicted DPT obj.
TODO: presumably this might also be the reason for the DPT related display faults under heavy memory pressure, but I'm still not sure how that would happen as the object should be pinned by intel_dpt_pin() while in active use by the display engine...
(cherry picked from commit 779cb5ba64ec7df80675a956c9022929514f517a)
Which versions are affected by CVE-2023-53378?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53378?
Apply the vendor's patch.
Is CVE-2023-53378 being exploited?
There is no known exploitation of CVE-2023-53378 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2023-53378, DEBIAN-CVE-2023-53378, GHSA-53wx-c6fx-gwfp, UBUNTU-CVE-2023-53378.