Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53389

drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached The MediaTek DisplayPort interface bridge driver starts its interrupts as soon as its probed. However when the interrupts trigger the bridge might not have been attached to a DRM device. As drm_helper_hpd_irq_event() does not check whether the passed in drm_device is valid or not, a NULL pointer passed in results in a kernel NULL pointer dereference in it. Check whether the bridge is attached and only trigger an HPD event if it is.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f70ac097a2cf5d4b67b2c1bbb73196c573ffcb7b to < 6524d3d58797975cc40b85be1e9b89721b4e8d0baffected
  • f70ac097a2cf5d4b67b2c1bbb73196c573ffcb7b to < 3551789d0635dfb2df8ab8e7fdbf0647e9c1724caffected
  • f70ac097a2cf5d4b67b2c1bbb73196c573ffcb7b to < d1c04e338016ae2517c641806a831b1f3eee2bedaffected
  • f70ac097a2cf5d4b67b2c1bbb73196c573ffcb7b to < 36b617f7e4ae663fcadd202ea061ca695ca75539affected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.28 to ≤ 6.1.*unaffected
  • 6.2.15 to ≤ 6.2.*unaffected
  • 6.3.2 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References