github - ghsa-mm25-cp37-hg3x

ghsa-mm25-cp37-hg3x

Vulnerability from github

Published

2025-12-09 18:30

Modified

2025-12-09 18:30

Details

In the Linux kernel, the following vulnerability has been resolved:

drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()

When disabling overlay plane in mxsfb_plane_overlay_atomic_update(), overlay plane's framebuffer pointer is NULL. So, dereferencing it would cause a kernel Oops(NULL pointer dereferencing). Fix the issue by disabling overlay plane in mxsfb_plane_overlay_atomic_disable() instead.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-53864"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-09T16:17:27Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()\n\nWhen disabling overlay plane in mxsfb_plane_overlay_atomic_update(),\noverlay plane\u0027s framebuffer pointer is NULL.  So, dereferencing it would\ncause a kernel Oops(NULL pointer dereferencing).  Fix the issue by\ndisabling overlay plane in mxsfb_plane_overlay_atomic_disable() instead.",
  "id": "GHSA-mm25-cp37-hg3x",
  "modified": "2025-12-09T18:30:34Z",
  "published": "2025-12-09T18:30:34Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53864"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0f98de0a11d29821d9448114178ddc1b1fe32a18"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8bf2d4ca521d3acb57fc1607386e749b3cc92aaf"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/aa656d48e871a1b062e1bbf9474d8b831c35074c"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2023-53864 (GCVE-0-2023-53864)

Vulnerability from cvelistv5

Published

2025-12-09 01:30

Modified

2025-12-09 01:30

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() When disabling overlay plane in mxsfb_plane_overlay_atomic_update(), overlay plane's framebuffer pointer is NULL. So, dereferencing it would cause a kernel Oops(NULL pointer dereferencing). Fix the issue by disabling overlay plane in mxsfb_plane_overlay_atomic_disable() instead.

References

URL

Tags

	https://git.kernel.org/stable/c/8bf2d4ca521d3acb57fc1607386e749b3cc92aaf
	https://git.kernel.org/stable/c/0f98de0a11d29821d9448114178ddc1b1fe32a18
	https://git.kernel.org/stable/c/aa656d48e871a1b062e1bbf9474d8b831c35074c

Impacted products

Vendor

Product

Version

Version: cb285a5348e768dbc8edfe28cc2be5ec0c7e1a33
Version: cb285a5348e768dbc8edfe28cc2be5ec0c7e1a33
Version: cb285a5348e768dbc8edfe28cc2be5ec0c7e1a33

Version: 5.19

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/mxsfb/mxsfb_kms.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8bf2d4ca521d3acb57fc1607386e749b3cc92aaf",
              "status": "affected",
              "version": "cb285a5348e768dbc8edfe28cc2be5ec0c7e1a33",
              "versionType": "git"
            },
            {
              "lessThan": "0f98de0a11d29821d9448114178ddc1b1fe32a18",
              "status": "affected",
              "version": "cb285a5348e768dbc8edfe28cc2be5ec0c7e1a33",
              "versionType": "git"
            },
            {
              "lessThan": "aa656d48e871a1b062e1bbf9474d8b831c35074c",
              "status": "affected",
              "version": "cb285a5348e768dbc8edfe28cc2be5ec0c7e1a33",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/mxsfb/mxsfb_kms.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.19"
            },
            {
              "lessThan": "5.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.54",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.4",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()\n\nWhen disabling overlay plane in mxsfb_plane_overlay_atomic_update(),\noverlay plane\u0027s framebuffer pointer is NULL.  So, dereferencing it would\ncause a kernel Oops(NULL pointer dereferencing).  Fix the issue by\ndisabling overlay plane in mxsfb_plane_overlay_atomic_disable() instead."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-09T01:30:33.263Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8bf2d4ca521d3acb57fc1607386e749b3cc92aaf"
        },
        {
          "url": "https://git.kernel.org/stable/c/0f98de0a11d29821d9448114178ddc1b1fe32a18"
        },
        {
          "url": "https://git.kernel.org/stable/c/aa656d48e871a1b062e1bbf9474d8b831c35074c"
        }
      ],
      "title": "drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53864",
    "datePublished": "2025-12-09T01:30:33.263Z",
    "dateReserved": "2025-12-09T01:27:17.829Z",
    "dateUpdated": "2025-12-09T01:30:33.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.