CVE-2023-52693

ACPI: video: check for error while searching for backlight device parent

published May 17, 2024

CVSS
—
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ACPI: video: check for error while searching for backlight device parent

If acpi_get_parent() called in acpi_video_dev_register_backlight()

fails, for example, because acpi_ut_acquire_mutex() fails inside

acpi_get_parent), this can lead to incorrect (uninitialized)

acpi_parent handle being passed to acpi_get_pci_dev() for detecting

the parent pci device.

Check acpi_get_parent() result and set parent device only in case of success.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Published
2024-05-17T14:27Z
EPSS history
Timeline
  • 17 MAY 14:27Z
    ACPI: video: check for error while searching for backlight device parent
    cvelistv5