SB20240531339 - NULL pointer dereference in Linux kernel drm panel driver
Published: May 31, 2024 Updated: May 14, 2025
Security Bulletin ID
SB20240531339
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2023-52821)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the versatile_panel_get_modes() function in drivers/gpu/drm/panel/panel-arm-versatile.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/c7dc0aca5962fb37dbea9769dd26ec37813faae1
- https://git.kernel.org/stable/c/2381f6b628b3214f07375e0adf5ce17093c31190
- https://git.kernel.org/stable/c/79813cd59398015867d51e6d7dcc14d287d4c402
- https://git.kernel.org/stable/c/4fa930ba046d20fc1899770396ee11e905fa96e4
- https://git.kernel.org/stable/c/8a9dd36fcb4f3906982b82593393578db4479992
- https://git.kernel.org/stable/c/924e5814d1f84e6fa5cb19c6eceb69f066225229
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.202
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.140
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.64
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.3
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7