CVE-2023-52563: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52563 is a memory leak vulnerability discovered in the Linux kernel's DRM (Direct Rendering Manager) Meson driver, specifically in the hpd_notify callback function. The vulnerability was identified in September 2023 and relates to the EDID (Extended Display Identification Data) handling in the Meson HDMI encoder (Kernel Git).

The vulnerability stems from a failure to free the EDID memory returned by the drm_bridge_get_edid() function in the Meson HDMI encoder's hpd_notify callback. This issue was introduced by commit 0af5e0b41110 which implemented the switch to bridge DRM_BRIDGE_ATTACH_NO_CONNECTOR in the Meson DRM driver (Kernel Git).

The vulnerability results in a memory leak in the Linux kernel's DRM subsystem, which could potentially lead to resource exhaustion over time if the affected callback is repeatedly triggered (NVD).

The vulnerability has been patched by adding proper memory cleanup code. The fix involves adding a kfree(edid) call after the EDID data is no longer needed in the hpd_notify callback function. The patch has been merged into the Linux kernel (Kernel Git).