CVE-2023-52981
kernel: drm/i915: Fix request ref counting during error capture & debugfs dump
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 27, 2025
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Intel i915 graphics driver. An improper reference counting issue occurs during error capture and debugging operations when managing graphics request objects. A local user could exploit this vulnerability to cause a kernel crash, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as Low severity because exploitation requires local system access on systems utilizing Intel GPU hardware, with the impact limited to a kernel crash resulting in denial of service. Typical Red Hat Enterprise Linux deployments operate headlessly or lack active Intel display controllers, significantly reducing practical exposure. Additionally, triggering the flawed reference tracking requires GPU error capture or administrative debugfs interactions, which are restricted under standard security profiles.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-911 · Improper Update of Reference Count