CVE-2023-53223

drm/msm/dsi: Add missing check for alloc_ordered_workqueue

State: Published
Severity: 5.5 Medium
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dsi: Add missing check for alloc_ordered_workqueue

Add check for the return value of alloc_ordered_workqueue as it may return NULL pointer and cause NULL pointer dereference.

Patchwork: https://patchwork.freedesktop.org/patch/517646/

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 3e18f157faeeb59034404569e8e07cbe1c0030a7Affected 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 9257974858ee847b2e1fd552691b8ba5c2fc1c7bAffected 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 3a9a4a9725c60f04326b5019a52ce15aee808506Affected 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 540c66180afd59309a442d3bf1f2393464c8b4c5Affected 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 5dfe7a5386fde5a656ca06602b31bf50e26954cdAffected 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 25a6499b1a53d854eda2b161b5c8a20296515dbeAffected 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 759ea5677c362fb1e3edc667260ba9f409dc931dAffected 0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 115906ca7b535afb1fe7b5406c566ccd3873f82bAffected
LinuxLinux	3.12Affected before 3.12Not affected 4.14.308 through 4.14.Not affected 4.19.276 through 4.19.Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 3e18f157faeeb59034404569e8e07cbe1c0030a7Affected
0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 9257974858ee847b2e1fd552691b8ba5c2fc1c7bAffected
0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 3a9a4a9725c60f04326b5019a52ce15aee808506Affected
0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 540c66180afd59309a442d3bf1f2393464c8b4c5Affected
0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 5dfe7a5386fde5a656ca06602b31bf50e26954cdAffected
0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 25a6499b1a53d854eda2b161b5c8a20296515dbeAffected
0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 759ea5677c362fb1e3edc667260ba9f409dc931dAffected
0cf6c71d70d8aa39b8fd0e39c9009602a0e0d300 to before 115906ca7b535afb1fe7b5406c566ccd3873f82bAffected

LinuxLinux

3.12Affected
before 3.12Not affected
4.14.308 through 4.14.*Not affected
4.19.276 through 4.19.*Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.