In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
References
| Link | Resource |
|---|---|
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19 | Mailing List Patch Release Notes |
| https://github.com/torvalds/linux/commit/15342f930ebebcfe36f2415049736a77d7d2e045 | Broken Link Patch |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html | |
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19 | Mailing List Patch Release Notes |
| https://github.com/torvalds/linux/commit/15342f930ebebcfe36f2415049736a77d7d2e045 | Broken Link Patch |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html |
Configurations
History
21 Nov 2024, 07:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19 - Mailing List, Patch, Release Notes | |
| References | () https://github.com/torvalds/linux/commit/15342f930ebebcfe36f2415049736a77d7d2e045 - Broken Link, Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - |
Information
Published : 2023-03-01 20:15
Updated : 2024-11-21 07:45
NVD link : CVE-2023-23004
Mitre link : CVE-2023-23004
CVE.ORG link : CVE-2023-23004
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference