CVE-2023-53388

drm/mediatek: Clean dangling pointer on bind error path

High · published September 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: Clean dangling pointer on bind error path

mtk_drm_bind() can fail, in which case drm_dev_put() is called,

destroying the drm_device object. However a pointer to it was still

being held in the private object, and that pointer would be passed along

to DRM in mtk_drm_sys_prepare() if a suspend were triggered at that

point, resulting in a panic. Clean the pointer when destroying the

object in the error path to prevent this from happening.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Published
2025-09-18T13:33Z
EPSS history
Timeline
  • 18 SEP 13:33Z
    drm/mediatek: Clean dangling pointer on bind error path
    cvelistv5