PT-2025-54046 · Linux · Linux Kernel

Published 2023-04-06 · Updated 2026-01-07 · CVE-2023-54217

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A fix addresses an issue in the Linux kernel related to reverting a commit intended to improve workqueue handling within the DRM/MSM subsystem. The original patch introduced NULL-pointer dereferences during early error scenarios in the msm drm init() function, specifically when the KMS pointer was not initialized. Additionally, the patch caused a memory leak of the DRM device. The fix reverts the problematic commit to allow for clean and backportable solutions to be implemented.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-04204

CVE-2023-54217

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54217.json · Exploit
• https://ubuntu.com/security/CVE-2023-54217 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54217 · Security Note
• https://bdu.fstec.ru/vul/2026-04204 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54217 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54217 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54217 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54217 · Vendor Advisory
• https://docs.bell-sw.com/security/cves/CVE-2023-54217 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/dfa70344d1b5f5ff08525a8c872c8dd5e82fc5d9 · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 · Note
• https://git.kernel.org/linus/dfa70344d1b5f5ff08525a8c872c8dd5e82fc5d9 · Note
• https://twitter.com/CVEnew/status/2006132974282997824 · Twitter Post
• https://git.kernel.org/stable/c/9078b434587722a6f2958dc1d536af6e39634db9 · Note