CVE-2023-53085: drm/edid: fix info leak when failing to get panel id

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-05-02 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged.

Affected products

Linux kernel: from 6.2 before 6.2.8; 6.3-rc1, 6.3-rc2 — fixed in 6.2.8

How to fix

Upgrade to a fixed version: Linux kernel 6.2.8. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/4d8457fe0eb9c80ff7795cf8a30962128b71d853
https://git.kernel.org/stable/c/598c42c78919117dc0d235ae22d17ad642377483

Get alerted when CVE-2023-53085 or the next vulnerability affects your stack