What’s Vulnerable › Vulnerabilities

CVE-2023-52753: drm/amd/display: Avoid NULL dereference of timing generator

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference of timing generator [Why & How] Check whether assigned timing generator is NULL or not before accessing its funcs to prevent NULL dereference.

Affected products

• Linux kernel: before 4.19.300; from 4.20 before 5.4.262; from 5.5 before 5.10.202; from 5.11 before 5.15.140; from 5.16 before 6.1.64; from 6.2 before 6.5.13 — fixed in 4.19.300, 5.10.202, 5.15.140, 5.4.262, 6.1.64, 6.5.13

How to fix

Upgrade to a fixed version: Linux kernel 4.19.300, 5.10.202, 5.15.140, 5.4.262. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/09909f515032fa80b921fd3118efe66b185d10fd
• https://git.kernel.org/stable/c/4e497f1acd99075b13605b2e7fa0cba721a2cfd9
• https://git.kernel.org/stable/c/6d8653b1a7a8dc938b566ae8c4f373b36e792c68
• https://git.kernel.org/stable/c/79b6a90f4f2433312154cd68452b0ba501fa74db
• https://git.kernel.org/stable/c/8a06894666e0b462c9316b26ab615cefdd0d676c
• https://git.kernel.org/stable/c/b1904ed480cee3f9f4036ea0e36d139cb5fee2d6
• https://git.kernel.org/stable/c/df8bc953eed72371e43ca407bd063507f760cf89
• https://git.kernel.org/stable/c/eac3e4760aa12159f7f5475d55a67b7933abc195
• https://git.kernel.org/stable/c/09909f515032fa80b921fd3118efe66b185d10fd
• https://git.kernel.org/stable/c/4e497f1acd99075b13605b2e7fa0cba721a2cfd9
• https://git.kernel.org/stable/c/6d8653b1a7a8dc938b566ae8c4f373b36e792c68
• https://git.kernel.org/stable/c/79b6a90f4f2433312154cd68452b0ba501fa74db

Get alerted when CVE-2023-52753 or the next vulnerability affects your stack