CVE-2023-53239

drm/msm/mdp5: Add check for kzalloc

State: Published
Severity: 5.5 Medium
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/mdp5: Add check for kzalloc

As kzalloc may fail and return NULL pointer, it should be better to check the return value in order to avoid the NULL pointer dereference.

Patchwork: https://patchwork.freedesktop.org/patch/514154/

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	1cff7440a86e04a613665803b42034c467f035fa to before 3975ea6eaffe26aec634b5c473e51dc76e73af62Affected 1cff7440a86e04a613665803b42034c467f035fa to before 49907c8873826ee771ba0ca1629e809c6479f617Affected 1cff7440a86e04a613665803b42034c467f035fa to before 82943a0730e00c14b03e25a4b2a1a9477ae89d7bAffected 1cff7440a86e04a613665803b42034c467f035fa to before bc579a2ee8b2e20c152b24b437d094832d8c9c9eAffected 1cff7440a86e04a613665803b42034c467f035fa to before 37ff771ed008b9cbffd0eab77985968364694ce3Affected 1cff7440a86e04a613665803b42034c467f035fa to before 13fcfcb2a9a4787fe4e49841d728f6f2e9fa6911Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

1cff7440a86e04a613665803b42034c467f035fa to before 3975ea6eaffe26aec634b5c473e51dc76e73af62Affected
1cff7440a86e04a613665803b42034c467f035fa to before 49907c8873826ee771ba0ca1629e809c6479f617Affected
1cff7440a86e04a613665803b42034c467f035fa to before 82943a0730e00c14b03e25a4b2a1a9477ae89d7bAffected
1cff7440a86e04a613665803b42034c467f035fa to before bc579a2ee8b2e20c152b24b437d094832d8c9c9eAffected
1cff7440a86e04a613665803b42034c467f035fa to before 37ff771ed008b9cbffd0eab77985968364694ce3Affected
1cff7440a86e04a613665803b42034c467f035fa to before 13fcfcb2a9a4787fe4e49841d728f6f2e9fa6911Affected

LinuxLinux

5.3Affected
before 5.3Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.