drm/msm: fix NULL-deref on snapshot tear down (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on snapshot tear down In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork: https://patchwork.freedesktop.org/patch/525099/
References
- https://git.kernel.org/stable/c/8f0e1ad5327a3499e7f09157cb714302a856e8a4
- https://git.kernel.org/stable/c/16e0e6fb4511c004a5a0987d5bd75d9bcfb2b175
- https://git.kernel.org/stable/c/8eca32b5b92a0be956a8934d7eddf4f70c107927
- https://git.kernel.org/stable/c/19fe79ae816a7e3400df1eb4d27530bf9b8ae258
- https://git.kernel.org/stable/c/a465353b9250802f87b97123e33a17f51277f0b1
European references
- ENISA EUVD · EUVD-2023-60159
- GCVE · GCVE-0-2023-53837
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 98659487b845c05b6bed85d881713545db674c7c < 8f0e1ad5327a3499e7f09157cb714302a856e8a4 ; affected 98659487b845c05b6bed85d881713545db674c7c < 16e0e6fb4511c004a5a0987d5bd75d9bcfb2b175 ; affected 98659487b845c05b6bed85d881713545db674c7c < 8eca32b5b92a0be956a8934d7eddf4f70c107927 ; affected 98659487b845c05b6bed85d881713545db674c7c < 19fe79ae816a7e3400df1eb4d27530bf9b8ae258 ; affected 98659487b845c05b6bed85d881713545db674c7c < a465353b9250802f87b97123e33a17f51277f0b1 |
| Linux · Linux | affected 5.14 ; unaffected 0 < 5.14 ; unaffected 5.15.112 ≤ 5.15.* ; unaffected 6.1.29 ≤ 6.1.* ; unaffected 6.2.16 ≤ 6.2.* ; unaffected 6.3.3 ≤ 6.3.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |