CVE-2023-53263

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create

We can't simply free the connector after calling drm_connector_init on it. We need to clean up the drm side first.

It might not fix all regressions from commit 2b5d1c29f6c4 ("drm/nouveau/disp: PIOR DP uses GPIO for HPD, not PMGR AUX interrupts"), but at least it fixes a memory corruption in error handling related to that commit.

This flaw is rated as having Moderate impact because it requires local access and specific NVIDIA display hardware to trigger an error state during display connector initialization, limiting the overall attack surface. Exploitation relies on uncommon failure conditions during device setup, which could result in a denial of service or memory corruption with elevated privileges. Standard enterprise server deployments without NVIDIA graphics hardware or systems utilizing alternative display configurations remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.