CVE-2023-53289

media: bdisp: Add missing check for create_workqueue

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: bdisp: Add missing check for create_workqueue

Add the check for the return value of the create_workqueue in order to avoid NULL pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before fc1aeafdf6fb0a136c2257000f0d478ee62953feAffected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 2bfbe3ad371ac5349302833198df14e442622cbcAffected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before c6a315f0b14074ac89723f55b749a557dda0ae2bAffected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 4362444dca02ab44ac844feda3cf6238ef953673Affected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 519b0849401194745ea40f9e07513b870afc1b42Affected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before c2e55481731b0e8c96f30f661e430aa884fbd354Affected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before eef95a2745cb91559bb03aa111c228fe38deaf64Affected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 0d09ce05724cfb3f5c5136893bec95305c641875Affected 28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 2371adeab717d8fe32144a84f3491a03c5838cfbAffected
LinuxLinux	4.2Affected before 4.2Not affected 4.14.315 through 4.14.Not affected 4.19.283 through 4.19.Not affected 5.4.243 through 5.4.Not affected 5.10.180 through 5.10.Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before fc1aeafdf6fb0a136c2257000f0d478ee62953feAffected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 2bfbe3ad371ac5349302833198df14e442622cbcAffected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before c6a315f0b14074ac89723f55b749a557dda0ae2bAffected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 4362444dca02ab44ac844feda3cf6238ef953673Affected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 519b0849401194745ea40f9e07513b870afc1b42Affected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before c2e55481731b0e8c96f30f661e430aa884fbd354Affected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before eef95a2745cb91559bb03aa111c228fe38deaf64Affected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 0d09ce05724cfb3f5c5136893bec95305c641875Affected
28ffeebbb7bdc0dd7899286b63f3c359d43d0a1a to before 2371adeab717d8fe32144a84f3491a03c5838cfbAffected

LinuxLinux

4.2Affected
before 4.2Not affected
4.14.315 through 4.14.*Not affected
4.19.283 through 4.19.*Not affected
5.4.243 through 5.4.*Not affected
5.10.180 through 5.10.*Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.