CVE-2023-52773
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() When ddc_service_construct() is called, it explicitly checks both the link type and whether there is something on…
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() When ddc_service_construct() is called, it explicitly checks both the link type and whether there is something on the link which will dictate whether the pin is marked as hw_supported. If the pin isn't set or the link is not set (such as from unloading/reloading amdgpu in an IGT test) then fail the amdgpu_dm_i2c_xfer() call.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/1d07b7e84276777dad3c8cfebdf8e739606f90c9Patch
- https://git.kernel.org/stable/c/5b14cf37b9f01de0b28c6f8960019d4c7883ce42Patch
- https://git.kernel.org/stable/c/b71f4ade1b8900d30c661d6c27f87c35214c398cPatch
- https://git.kernel.org/stable/c/fb5c134ca589fe670430acc9e7ebf2691ca2476dPatch
- https://git.kernel.org/stable/c/1d07b7e84276777dad3c8cfebdf8e739606f90c9Patch
- https://git.kernel.org/stable/c/5b14cf37b9f01de0b28c6f8960019d4c7883ce42Patch
- https://git.kernel.org/stable/c/b71f4ade1b8900d30c661d6c27f87c35214c398cPatch
- https://git.kernel.org/stable/c/fb5c134ca589fe670430acc9e7ebf2691ca2476dPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.