What’s Vulnerable › Vulnerabilities

CVE-2023-52861: drm: bridge: it66121: Fix invalid connector dereference

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121: Fix invalid connector dereference Fix the NULL pointer dereference when no monitor is connected, and the sound card is opened from userspace. Instead return an empty buffer (of zeroes) as the EDID information to the sound framework if there is no connector attached.

Affected products

• Linux kernel: from 5.19 before 6.1.63; from 6.2 before 6.5.12; from 6.6 before 6.6.2 — fixed in 6.1.63, 6.5.12, 6.6.2

How to fix

Upgrade to a fixed version: Linux kernel 6.1.63, 6.5.12, 6.6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1374561a7cbc9a000b77bb0473bb2c19daf18d86
• https://git.kernel.org/stable/c/1669d7b21a664aa531856ce85b01359a376baebc
• https://git.kernel.org/stable/c/2c80c4f0d2845645f41cbb7c9304c8efbdbd4331
• https://git.kernel.org/stable/c/d0375f6858c4ff7244b62b02eb5e93428e1916cd
• https://git.kernel.org/stable/c/1374561a7cbc9a000b77bb0473bb2c19daf18d86
• https://git.kernel.org/stable/c/1669d7b21a664aa531856ce85b01359a376baebc
• https://git.kernel.org/stable/c/2c80c4f0d2845645f41cbb7c9304c8efbdbd4331
• https://git.kernel.org/stable/c/d0375f6858c4ff7244b62b02eb5e93428e1916cd

Get alerted when CVE-2023-52861 or the next vulnerability affects your stack