CVE-2023-53991

drm/msm/dpu: Disallow unallocated resources to be returned

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
9.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: Disallow unallocated resources to be returned

In the event that the topology requests resources that have not been

created by the system (because they are typically not represented in

dpu_mdss_cfg ^1), the resource(s) in global_state (in this case DSC

blocks, until their allocation/assignment is being sanity-checked in

"drm/msm/dpu: Reject topologies for which no DSC blocks are available")

remain NULL but will still be returned out of

dpu_rm_get_assigned_resources, where the caller expects to get an array

containing num_blks valid pointers (but instead gets these NULLs).

To prevent this from happening, where null-pointer dereferences

typically result in a hard-to-debug platform lockup, num_blks shouldn't

increase past NULL blocks and will print an error and break instead.

After all, max_blks represents the static size of the maximum number of

blocks whereas the actual amount varies per platform.

^1: which can happen after a git rebase ended up moving additions to

_dpu_cfg to a different struct which has the same patch context.

Patchwork: https://patchwork.freedesktop.org/patch/517636/

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.4th percentile
Published
2025-12-24T10:55Z
EPSS history
Timeline
  • 24 DEC 10:55Z
    drm/msm/dpu: Disallow unallocated resources to be returned
    cvelistv5