CVE-2023-52821: drm/panel: fix a possible null pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
drm/panel: fix a possible null pointer dereference
In versatilepanelgetmodes(), the return value of drmmodeduplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate(). Add a check to avoid npd.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52821?
The severity of CVE-2023-52821 is considered medium due to the potential for a null pointer dereference.
How do I fix CVE-2023-52821?
To fix CVE-2023-52821, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1.
Which versions of the Linux kernel are affected by CVE-2023-52821?
CVE-2023-52821 affects Linux kernel versions from 5.10.202 up to 6.6.3, excluding specific fixed versions.
What components are impacted by CVE-2023-52821?
CVE-2023-52821 impacts the drm/panel component in the Linux kernel.
Is CVE-2023-52821 exploitable in production systems?
Yes, CVE-2023-52821 may be exploitable in production systems, particularly where the vulnerable versions of the Linux kernel are deployed.