Riskcovery

CVE-2023-53336

media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings

State
Published
Severity
5.5 Medium
Published
Sep 17, 2025
Updated
Oct 3, 2026
Reserved
Sep 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings

When ipu_bridge_parse_rotation() and ipu_bridge_parse_orientation() run sensor->adev is not set yet.

So if either of the dev_warn() calls about unknown values are hit this will lead to a NULL pointer deref.

Set sensor->adev earlier, with a borrowed ref to avoid making unrolling on errors harder, to fix this.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 485aa3df0dffa62d347ea4e0116f549338accc59 to before bca783c943cefea97c27f02fdd16bf414e8057dfAffected
  • 485aa3df0dffa62d347ea4e0116f549338accc59 to before 3de35e29cfddfe6bff762b15bcfe8d80bebac6cbAffected
  • 485aa3df0dffa62d347ea4e0116f549338accc59 to before e08b091e33ecf6e4cb2c0c5820a69abe7673280bAffected
  • 485aa3df0dffa62d347ea4e0116f549338accc59 to before 284be5693163343e1cf17c03917eecd1d6681bcfAffected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.4.16 through 6.4.*Not affected
  • 6.5.3 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.