CVE-2023-53325

drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()

At a glance

Severity
MEDIUM 5.5
EPSS
EPSS 0.15 % · percentile 4 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() Change logging from drm_{err,info}() to dev_{err,info}() in functions mtk_dp_aux_transfer() and mtk_dp_aux_do_transfer(): this will be essential to avoid getting NULL pointer kernel panics if any kind of error happens during AUX transfers happening before the bridge is attached. This may potentially start happening in a later commit implementing aux-bus support, as AUX transfers will be triggered from the panel driver (for EDID) before the mtk-dp bridge gets attached, and it's done in preparation for the same.

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Weaknesses (CWE)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected f70ac097a2cf5d4b67b2c1bbb73196c573ffcb7b < 4c743c1dd2ee2a72951660b6798d4d7f7674f87b ; affected f70ac097a2cf5d4b67b2c1bbb73196c573ffcb7b < 7839f62294039959076dd06232e07aec7f7d5b2b ; affected f70ac097a2cf5d4b67b2c1bbb73196c573ffcb7b < fd70e2019bfbcb0ed90c5e23839bf510ce6acf8f
Linux · Linuxaffected 6.1 ; unaffected 0 < 6.1 ; unaffected 6.1.55 ≤ 6.1.* ; unaffected 6.5.5 ≤ 6.5.* ; unaffected 6.6 ≤ *

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD