Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-53388

drm/mediatek: Clean dangling pointer on bind error path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtk_drm_bind() can fail, in which case drm_dev_put() is called, destroying the drm_device object. However a pointer to it was still being held in the private object, and that pointer would be passed along to DRM in mtk_drm_sys_prepare() if a suspend were triggered at that point, resulting in a panic. Clean the pointer when destroying the object in the error path to prevent this from happening.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 119f5173628aa7a0c3cf9db83460d40709e8241d to < 9a48f99aa7bea15e0b1d8b0040c46b4792eddf3baffected
  • 119f5173628aa7a0c3cf9db83460d40709e8241d to < a161f1d92aabb3b8463f752bdc3474dc3a5ec0e5affected
  • 119f5173628aa7a0c3cf9db83460d40709e8241d to < 6a89ddee1686a8872384aaa9f0bcfa6b675acd86affected
  • 119f5173628aa7a0c3cf9db83460d40709e8241d to < 49cf87919daeeeeeb9e924c39bdd9203af434461affected
  • 119f5173628aa7a0c3cf9db83460d40709e8241d to < 7b551a501fa714890e55bae73efede1185728d72affected
  • 119f5173628aa7a0c3cf9db83460d40709e8241d to < f3887c771576c5d740c5c5b8bf654a8ab8020b7daffected
  • 119f5173628aa7a0c3cf9db83460d40709e8241d to < 36aa8c61af55675ed967900fbe5deb32d776f051affected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 4.19.276 to ≤ 4.19.*unaffected
  • 5.4.235 to ≤ 5.4.*unaffected
  • 5.10.173 to ≤ 5.10.*unaffected
  • 5.15.99 to ≤ 5.15.*unaffected
  • 6.1.16 to ≤ 6.1.*unaffected
  • 6.2.3 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References