PT-2023-3338 · Linux+5 · Linux Kernel+5

Published

2023-01-24

·

Updated

2025-03-11

·

CVE-2023-3220

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1-rc8
Description The issue is related to the function dpu crtc atomic check() in the drivers/gpu/drm/msm/disp/dpu1/dpu crtc.c module of the MSM DRM Linux kernel driver, which is associated with a null pointer dereference. This could allow an attacker to cause a denial of service. The problem arises because dpu crtc atomic check() lacks a check of the return value of kzalloc(), leading to a NULL pointer dereference.
Recommendations For Linux kernel versions prior to 6.1-rc8, as a temporary workaround, consider disabling the dpu crtc atomic check() function until a patch is available. Restrict access to the vulnerable module drivers/gpu/drm/msm/disp/dpu1/dpu crtc.c to minimize the risk of exploitation.

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2023-1878
ALT-PU-2023-1881
ALT-PU-2023-4663
ALT-PU-2024-14046
ALT-PU-2024-6818
AZL-27271
BDU:2023-03494
CVE-2023-3220
OESA-2023-1435
OESA-2023-1436
OESA-2023-1437
OESA-2023-1438
OESA-2023-1439
OPENSUSE-SU-2023_2871-1
OPENSUSE-SU-2023_2892-1
SUSE-SU-2023:2809-1
SUSE-SU-2023:2871-1
SUSE-SU-2023:2892-1
USN-6385-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu