CVE-2023-52821

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/panel: fix a possible null pointer dereference

In versatile_panel_get_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= f40f5b87d974655984ce545515e5c9e57b371b3c, < c7dc0aca5962fb37dbea9769dd26ec37813faae1; >= f40f5b87d974655984ce545515e5c9e57b371b3c, < 2381f6b628b3214f07375e0adf5ce17093c31190; >= f40f5b87d974655984ce545515e5c9e57b371b3c, < 79813cd59398015867d51e6d7dcc14d287d4c402; >= f40f5b87d974655984ce545515e5c9e57b371b3c, < 4fa930ba046d20fc1899770396ee11e905fa96e4; >= f40f5b87d974655984ce545515e5c9e57b371b3c, < 8a9dd36fcb4f3906982b82593393578db4479992; >= f40f5b87d974655984ce545515e5c9e57b371b3c, < 924e5814d1f84e6fa5cb19c6eceb69f066225229
LinuxLinux4.17

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-528257.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix a race condition of vram buffer unref in svm code pranCVE-2023-528265.5In the Linux kernel, the following vulnerability has been resolved: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference InCVE-2023-528277.1In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stCVE-2023-528285.5In the Linux kernel, the following vulnerability has been resolved: bpf: Detect IP == ksym.end as part of BPF program Now that bpf_throw kCVE-2023-528298.4In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_regCVE-2023-52838.8A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown procCVE-2023-528315.5In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Don't offline the last non-isolated CPU If a system has iCVE-2023-528329.1In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() WCVE-2023-528335.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date->evt_skb is NULL check fix crash because ofCVE-2023-528345.5In the Linux kernel, the following vulnerability has been resolved: atl1c: Work around the DMA RX overflow issue This is based on alx drivCVE-2023-528357.8In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound WhenCVE-2023-528367.8In the Linux kernel, the following vulnerability has been resolved: locking/ww_mutex/test: Fix potential workqueue corruption In some case
CVE-2023-52821: Medium severity, CVSS 5.5 | Vulnix