Vulnerability in Linux

CVE-2023-53833

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL ptr deref by checking new_crtc_state intel_atomic_get_new_crtc_state can return NULL, unless crtc state wasn't obtained previously with intel_atomic_get_crtc_state, so we must check it for NULLness here, just as in many other places, where we can't guarantee that intel_atomic_get_crtc_state was called. We are currently getting NULL ptr deref because of that, so this fix was confirmed to help. (cherry picked from commit 1d5b09f8daf859247a1ea65b0d732a24d88980d8)

EPSS: 0.002 (12.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 74a75dc908692dd0548209004e53832c02433c0c, 5.16, 0

References