CVE-2023-52693

ACPI: video: check for error while searching for backlight device parent

State: Published
Severity: Not scored
Published: May 17, 2024
Updated: May 11, 2026
Reserved: Mar 7, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: video: check for error while searching for backlight device parent

If acpi_get_parent() called in acpi_video_dev_register_backlight() fails, for example, because acpi_ut_acquire_mutex() fails inside acpi_get_parent), this can lead to incorrect (uninitialized) acpi_parent handle being passed to acpi_get_pci_dev() for detecting the parent pci device.

Check acpi_get_parent() result and set parent device only in case of success.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9661e92c10a9775243c1ecb73373528ed8725a10 to before 556f02699d33c1f40b1b31bd25828ce08fa165d8Affected 9661e92c10a9775243c1ecb73373528ed8725a10 to before 1e3a2b9b4039bb4d136dca59fb31e06465e056f3Affected 9661e92c10a9775243c1ecb73373528ed8725a10 to before c4e1a0ef0b4782854c9b77a333ca912b392bed2fAffected 9661e92c10a9775243c1ecb73373528ed8725a10 to before 3a370502a5681986f9828e43be75ce26c6ab24afAffected 9661e92c10a9775243c1ecb73373528ed8725a10 to before 2124c5bc22948fc4d09a23db4a8acdccc7d21e95Affected 9661e92c10a9775243c1ecb73373528ed8725a10 to before 39af144b6d01d9b40f52e5d773e653957e6c379cAffected 9661e92c10a9775243c1ecb73373528ed8725a10 to before 72884ce4e10417b1233b614bf134da852df0f15fAffected 9661e92c10a9775243c1ecb73373528ed8725a10 to before ccd45faf4973746c4f30ea41eec864e5cf191099Affected
LinuxLinux	2.6.39Affected before 2.6.39Not affected 4.19.306 through 4.19.Not affected 5.4.268 through 5.4.Not affected 5.10.209 through 5.10.Not affected 5.15.148 through 5.15.Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

9661e92c10a9775243c1ecb73373528ed8725a10 to before 556f02699d33c1f40b1b31bd25828ce08fa165d8Affected
9661e92c10a9775243c1ecb73373528ed8725a10 to before 1e3a2b9b4039bb4d136dca59fb31e06465e056f3Affected
9661e92c10a9775243c1ecb73373528ed8725a10 to before c4e1a0ef0b4782854c9b77a333ca912b392bed2fAffected
9661e92c10a9775243c1ecb73373528ed8725a10 to before 3a370502a5681986f9828e43be75ce26c6ab24afAffected
9661e92c10a9775243c1ecb73373528ed8725a10 to before 2124c5bc22948fc4d09a23db4a8acdccc7d21e95Affected
9661e92c10a9775243c1ecb73373528ed8725a10 to before 39af144b6d01d9b40f52e5d773e653957e6c379cAffected
9661e92c10a9775243c1ecb73373528ed8725a10 to before 72884ce4e10417b1233b614bf134da852df0f15fAffected
9661e92c10a9775243c1ecb73373528ed8725a10 to before ccd45faf4973746c4f30ea41eec864e5cf191099Affected

LinuxLinux

2.6.39Affected
before 2.6.39Not affected
4.19.306 through 4.19.*Not affected
5.4.268 through 5.4.*Not affected
5.10.209 through 5.10.*Not affected
5.15.148 through 5.15.*Not affected
6.1.75 through 6.1.*Not affected
6.6.14 through 6.6.*Not affected
6.7.2 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.