CVE-2023-53152

一、漏洞信息
 漏洞编号：[CVE-2023-53152](https://nvd.nist.gov/vuln/detail/CVE-2023-53152)
 漏洞归属组件：[hive](https://gitee.com/src-openeuler/hive)
 漏洞归属的版本：3.1.2,3.1.3
 CVSS V3.0分值：
  BaseScore：5.5 Medium
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:drm/amdgpu: fix calltrace warning in amddrm_buddy_finiThe following call trace is observed when removing the amdgpu driver, whichis caused by that BOs allocated for psp are not freed until removing.[61811.450562] RIP: 0010:amddrm_buddy_fini.cold+0x29/0x47 [amddrm_buddy][61811.450577] Call Trace:[61811.450577]  <TASK>[61811.450579]  amdgpu_vram_mgr_fini+0x135/0x1c0 [amdgpu][61811.450728]  amdgpu_ttm_fini+0x207/0x290 [amdgpu][61811.450870]  amdgpu_bo_fini+0x27/0xa0 [amdgpu][61811.451012]  gmc_v9_0_sw_fini+0x4a/0x60 [amdgpu][61811.451166]  amdgpu_device_fini_sw+0x117/0x520 [amdgpu][61811.451306]  amdgpu_driver_release_kms+0x16/0x30 [amdgpu][61811.451447]  devm_drm_dev_init_release+0x4d/0x80 [drm][61811.451466]  devm_action_release+0x15/0x20[61811.451469]  release_nodes+0x40/0xb0[61811.451471]  devres_release_all+0x9b/0xd0[61811.451473]  __device_release_driver+0x1bb/0x2a0[61811.451476]  driver_detach+0xf3/0x140[61811.451479]  bus_remove_driver+0x6c/0xf0[61811.451481]  driver_unregister+0x31/0x60[61811.451483]  pci_unregister_driver+0x40/0x90[61811.451486]  amdgpu_exit+0x15/0x447 [amdgpu]For smu v13_0_2, if the GPU supports xgmi, refer tocommit f5c7e7797060 ( drm/amdgpu: Adjust removal control flow for smu v13_0_2 ),it will run gpu recover in AMDGPU_RESET_FOR_DEVICE_REMOVE mode when removing,which makes all devices in hive list have hw reset but no resume except thebasic ip blocks, then other ip blocks will not call .hw_fini according toip_block.status.hw.Since psp_free_shared_bufs just includes some software operations, so moveit to psp_sw_fini.
 漏洞公开时间：2025-09-15 22:15:37
 漏洞创建时间：2025-09-15 22:46:34
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2023-53152
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://git.kernel.org/stable/c/01382501509871d0799bab6bd412c228486af5bf |  |
|  | https://git.kernel.org/stable/c/756d674117f5c451f415d1c4046b927052a90c14 |  |
|  | https://git.kernel.org/stable/c/ab6f446c220db0c131f2071846afd835799be0fb |  |
|  | https://lore.kernel.org/linux-cve-announce/2025091552-CVE-2023-53152-130d@gregkh/T/#u |  |
|  | https://security-tracker.debian.org/tracker/CVE-2023-53152 |  |
|  | https://docs.bell-sw.com/security/cves/CVE-2023-53152 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2023-53152 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2023-53152 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025091552-CVE-2023-53152-130d@gregkh/T |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2395307 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| gregkh/linux |  | https://git.kernel.org/stable/c/01382501509871d0799bab6bd412c228486af5bf.patch |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/756d674117f5c451f415d1c4046b927052a90c14 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/ab6f446c220db0c131f2071846afd835799be0fb |  | ljqc |
|  |  | https://git.kernel.org/stable/c/01382501509871d0799bab6bd412c228486af5bf |  | nvd |
|  |  | https://git.kernel.org/stable/c/756d674117f5c451f415d1c4046b927052a90c14 |  | nvd |
|  |  | https://git.kernel.org/stable/c/ab6f446c220db0c131f2071846afd835799be0fb |  | nvd |

</details>
 
二、漏洞分析结构反馈
 影响性分析说明：
                                         
 openEuler评分：
   
 受影响版本排查(受影响/不受影响)：
  1.master(3.1.3):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next:
7.openEuler-24.03-LTS-SP1:
8.openEuler-24.03-LTS-SP2:

修复是否涉及abi变化(是/否)：
  1.master(3.1.3):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next:
7.openEuler-24.03-LTS-SP1:
8.openEuler-24.03-LTS-SP2:

原因说明：
  1.master(3.1.3):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next:
7.openEuler-24.03-LTS-SP1:
8.openEuler-24.03-LTS-SP2:

src-openEuler/hive

内容风险标识

评论 (3)

src-openEuler/hive .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2023-53152

评论 (3)

搜索帮助

src-openEuler/hive