CVE-2023-53545: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53545 affects the Linux kernel's AMD GPU driver (amdgpu) and involves improper handling of the csa_va (Command Submission Area Virtual Address) in the DRM subsystem. The vulnerability was disclosed on October 4, 2025 (NVD).

The vulnerability occurs in the DRM/AMDGPU driver where the Root PD BO (Page Directory Buffer Object) should be reserved before unmapping and removing a bo_va from VM. The issue specifically manifests in the drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c file at line 1762 in the amdgpu_vm_bo_del function. The vulnerability has a CVSS 3.1 score of 5.5 with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (RedHat).

The vulnerability can lead to lockdep (kernel lock dependency validator) complaints and potential system instability. The impact is primarily focused on system availability, with no direct impact on confidentiality or integrity as indicated by the CVSS metrics (RedHat).

Red Hat Enterprise Linux 9 has deferred the fix for both kernel and kernel-rt packages. Earlier versions of Red Hat Enterprise Linux (6, 7, and 8) are not affected by this vulnerability (RedHat).