CVE-2023-53389

drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached

Medium · published September 18, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached

The MediaTek DisplayPort interface bridge driver starts its interrupts

as soon as its probed. However when the interrupts trigger the bridge

might not have been attached to a DRM device. As drm_helper_hpd_irq_event()

does not check whether the passed in drm_device is valid or not, a NULL

pointer passed in results in a kernel NULL pointer dereference in it.

Check whether the bridge is attached and only trigger an HPD event if

it is.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Published
2025-09-18T13:33Z
EPSS history
Timeline
  • 18 SEP 13:33Z
    drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached
    cvelistv5