CVE-2023-53314

In the Linux kernel, the following vulnerability has been resolved:

fbdev/ep93xx-fb: Do not assign to struct fb_info.dev

Do not assing the Linux device to struct fb_info.dev. The call to register_framebuffer() initializes the field to the fbdev device. Drivers should not override its value.

Fixes a bug where the driver incorrectly decreases the hardware device's reference counter and leaks the fbdev device.

v2: * add Fixes tag (Dan)

This vulnerability poses no security risk to Red Hat Enterprise Linux as the affected Cirrus Logic EP93xx framebuffer driver is not enabled or compiled in any supported Red Hat kernel build. The flaw specifically targets legacy EP93xx ARM platforms that are unsupported by Red Hat enterprise distributions. Because the vulnerable driver code is not present, typical deployments are completely unexposed.