CVE-2023-53324: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability was discovered in the Linux kernel's drm/msm/mdp5 component, identified as CVE-2023-53324. The issue was found in the plane state handling mechanism that was introduced with the plane_state->commit refcount several years ago in commit 21a01abbe32a. The vulnerability was published on September 16, 2025 (NVD).

The vulnerability exists in the Linux kernel's display driver manager (DRM) subsystem, specifically in the MSM MDP5 (Mobile Display Processor version 5) component. The issue stems from improper handling of plane states that leak memory resources due to incorrect usage of helper functions related to the plane_state->commit refcount mechanism (NVD).

The vulnerability affects various Linux distributions and their kernel versions. Ubuntu has marked this with medium priority and has released fixes for multiple versions including Ubuntu 22.04 LTS (jammy), 20.04 LTS (focal), and 18.04 LTS (bionic). The issue affects multiple kernel packages including linux-aws, linux-azure, and linux-gcp (Ubuntu).

Patches have been released to address this vulnerability across multiple Linux distributions. Ubuntu has released fixes in kernel versions 5.15.0-94.104 for 22.04 LTS, 5.4.0-169.187 for 20.04 LTS, and 5.4.0-169.187~18.04.1 for 18.04 LTS. Users are advised to update their systems to these patched versions (Ubuntu).