CVE-2023-52788

Summary

In the Linux kernel, the following vulnerability has been resolved:

i915/perf: Fix NULL deref bugs with drm_dbg() calls

When i915 perf interface is not available dereferencing it will lead to NULL dereferences.

As returning -ENOTSUPP is pretty clear return when perf interface is not available.

[tursulin: added stable tag] (cherry picked from commit 36f27350ff745bd228ab04d7845dfbffc177a889)

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9b344cf6aea0a69c00e19efdc6e02c6d5aae1a23 < 1566e8be73fd5fa424e88d2a4cffdc34f970f0e1affected
LinuxLinux2fec539112e89255b6a47f566e21d99937fada7b < 55db76caa782baa4a1bf02296e2773c38a524a3eaffected
LinuxLinux2fec539112e89255b6a47f566e21d99937fada7b < bf8e105030083e7b71591cdf437e464bcd8a0c09affected
LinuxLinux2fec539112e89255b6a47f566e21d99937fada7b < 10f49cdfd5fb342a1a9641930dc040c570694e98affected
LinuxLinux2fec539112e89255b6a47f566e21d99937fada7b < 471aa951bf1206d3c10d0daa67005b8e4db4ff83affected
LinuxLinux5.15.108 < 5.15.140affected
LinuxLinux6.0affected
LinuxLinux0 < 6.0unaffected
LinuxLinux5.15.140 <= 5.15.*unaffected
LinuxLinux6.1.64 <= 6.1.*unaffected
LinuxLinux6.5.13 <= 6.5.*unaffected
LinuxLinux6.6.3 <= 6.6.*unaffected
LinuxLinux6.7 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References