CVE-2023-53801 iommu/sprd: Release dma buffer to avoid memory leak
A memory leak in the Linux kernel's SPRD IOMMU driver allows attackers to cause denial of service by exhausting system memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53801?
CVE-2023-53801 is a memory corruption vulnerability in Linux, published on 9 Dec 2025.
Official description
In the Linux kernel, the following vulnerability has been resolved:
iommu/sprd: Release dma buffer to avoid memory leak
When attaching to a domain, the driver would alloc a DMA buffer which is used to store address mapping table, and it need to be released when the IOMMU domain is freed.
Which versions are affected by CVE-2023-53801?
How do I fix CVE-2023-53801?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-53801 being exploited?
There is no known exploitation of CVE-2023-53801 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-53801, DEBIAN-CVE-2023-53801, GHSA-pj52-jg99-wg36, UBUNTU-CVE-2023-53801.