What’s Vulnerable › Vulnerabilities

CVE-2023-53837: drm/msm: fix NULL-deref on snapshot tear down

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on snapshot tear down In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork: https://patchwork.freedesktop.org/patch/525099/

Affected products

• Linux kernel: 5.14 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/16e0e6fb4511c004a5a0987d5bd75d9bcfb2b175
• https://git.kernel.org/stable/c/19fe79ae816a7e3400df1eb4d27530bf9b8ae258
• https://git.kernel.org/stable/c/8eca32b5b92a0be956a8934d7eddf4f70c107927
• https://git.kernel.org/stable/c/8f0e1ad5327a3499e7f09157cb714302a856e8a4
• https://git.kernel.org/stable/c/a465353b9250802f87b97123e33a17f51277f0b1

Get alerted when CVE-2023-53837 or the next vulnerability affects your stack