What’s Vulnerable › Vulnerabilities

CVE-2023-53833: drm/i915: Fix NULL ptr deref by checking new_crtc_state

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL ptr deref by checking new_crtc_state intel_atomic_get_new_crtc_state can return NULL, unless crtc state wasn't obtained previously with intel_atomic_get_crtc_state, so we must check it for NULLness here, just as in many other places, where we can't guarantee that intel_atomic_get_crtc_state was called. We are currently getting NULL ptr deref because of that, so this fix was confirmed to help. (cherry picked from commit 1d5b09f8daf859247a1ea65b0d732a24d88980d8)

Affected products

• Linux kernel: 5.16 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/8b3c0d2d1685ba40b0af4ee1f8d8824a73870f88
• https://git.kernel.org/stable/c/a41d985902c153c31c616fe183cf2ee331e95ecb
• https://git.kernel.org/stable/c/dbf25cc21beff4fd2e730573845a266504b21bb2

Get alerted when CVE-2023-53833 or the next vulnerability affects your stack