CVE-2023-52861

low-risk
Published 2024-05-21

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121: Fix invalid connector dereference Fix the NULL pointer dereference when no monitor is connected, and the sound card is opened from userspace. Instead return an empty buffer (of zeroes) as the EDID information to the sound framework if there is no connector attached.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.2/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (8)

Patch https://git.kernel.org/stable/c/1374561a7cbc9a000b77bb0473bb2c19daf18d86
Patch https://git.kernel.org/stable/c/1669d7b21a664aa531856ce85b01359a376baebc
Patch https://git.kernel.org/stable/c/2c80c4f0d2845645f41cbb7c9304c8efbdbd4331
Patch https://git.kernel.org/stable/c/d0375f6858c4ff7244b62b02eb5e93428e1916cd
Patch https://git.kernel.org/stable/c/1374561a7cbc9a000b77bb0473bb2c19daf18d86
Patch https://git.kernel.org/stable/c/1669d7b21a664aa531856ce85b01359a376baebc
Patch https://git.kernel.org/stable/c/2c80c4f0d2845645f41cbb7c9304c8efbdbd4331
Patch https://git.kernel.org/stable/c/d0375f6858c4ff7244b62b02eb5e93428e1916cd
25
/ 100
low-risk
Severity 20/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal