CVE-2023-52586

drm/msm/dpu: Add mutex lock in control vblank irq

At a glance

Severity
HIGH 7.8
EPSS
EPSS 0.23 % · percentile 14 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to synchronize vblank enable/disable operations happening from different threads to prevent race conditions while registering/unregistering the vblank irq callback. v4: -Removed vblank_ctl_lock from dpu_encoder_virt, so it is only a parameter of dpu_encoder_phys. -Switch from atomic refcnt to a simple int counter as mutex has now been added v3: Mistakenly did not change wording in last version. It is done now. v2: Slightly changed wording of commit message Patchwork: https://patchwork.freedesktop.org/patch/571854/

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1HIGH 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef < f6dd625053726ea2a209282bee97218f2ec04149 ; affected 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef < 14f109bf74dd67e1d0469fed859c8e506b0df53f ; affected 25fdd5933e4c0f5fe2ea5cd59994f8ac5fbe90ef < 45284ff733e4caf6c118aae5131eb7e7cf3eea5a
Linux · Linuxaffected 4.19 ; unaffected 0 < 4.19 ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.7.4 ≤ 6.7.* ; unaffected 6.8 ≤ *

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD