SB2025121093 - NULL pointer dereference in Linux kernel drm msm driver
Published: December 10, 2025 Updated: December 12, 2025
Security Bulletin ID
SB2025121093
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2023-53837)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the msm_drm_uninit() function in drivers/gpu/drm/msm/msm_drv.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/16e0e6fb4511c004a5a0987d5bd75d9bcfb2b175
- https://git.kernel.org/stable/c/19fe79ae816a7e3400df1eb4d27530bf9b8ae258
- https://git.kernel.org/stable/c/8eca32b5b92a0be956a8934d7eddf4f70c107927
- https://git.kernel.org/stable/c/8f0e1ad5327a3499e7f09157cb714302a856e8a4
- https://git.kernel.org/stable/c/a465353b9250802f87b97123e33a17f51277f0b1
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.112
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.29
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.16
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.3
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4