CVE-2023-53571
published 2025-10-04CVE-2023-53571: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intel_get_crtc_new_encoder() less oopsy The point of the WARN was to print…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Make intel_get_crtc_new_encoder() less oopsy
The point of the WARN was to print something, not oops
straight up. Currently that is precisely what happens
if we can't find the connector for the crtc in the atomic
state. Get the dev pointer from the atomic state instead
of the potentially NULL encoder to avoid that.
(cherry picked from commit 3b6692357f70498f617ea1b31a0378070a0acf1c)
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3a47ae201e074945bbde0b088e4c1215c07f4d75 < 780f303233c35eeb5132e3ee1cbc8f4cebe86dd2 | 780f303233c35eeb5132e3ee1cbc8f4cebe86dd2 |
| linux | linux | >= 3a47ae201e074945bbde0b088e4c1215c07f4d75 < 54202488c835dab8c648acd107f0bb8eaa699894 | 54202488c835dab8c648acd107f0bb8eaa699894 |
| linux | linux | >= 3a47ae201e074945bbde0b088e4c1215c07f4d75 < 0fe6ef82e4f4764e8f556632e4cd93d78d448e99 | 0fe6ef82e4f4764e8f556632e4cd93d78d448e99 |
| linux | linux | >= 3a47ae201e074945bbde0b088e4c1215c07f4d75 < 8cd725315c559a8a4d18ac1d7fce1d6b9a667529 | 8cd725315c559a8a4d18ac1d7fce1d6b9a667529 |
| linux | linux | >= 3a47ae201e074945bbde0b088e4c1215c07f4d75 < fd8b0abecdf66379e9d25d7448b942b5be379cb2 | fd8b0abecdf66379e9d25d7448b942b5be379cb2 |
| linux | linux | >= 3a47ae201e074945bbde0b088e4c1215c07f4d75 < 631420b06597a33c72b6dcef78d1c2dea17f452d | 631420b06597a33c72b6dcef78d1c2dea17f452d |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 5.11 < 5.15.111 | 5.15.111 |
| linux | linux_kernel | >= 5.16 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 5.7 < 5.10.180 | 5.10.180 |
| linux | linux_kernel | >= 6.2 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3 < 6.3.2 | 6.3.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r37f-5648-cmg6: In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Make intel_get_crtc_new_encoder() less oopsy
The point of the WARN was
ghsa_unreviewed·2025-10-04
CVE-2023-53571 [MEDIUM] GHSA-r37f-5648-cmg6: In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Make intel_get_crtc_new_encoder() less oopsy
The point of the WARN was
In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Make intel_get_crtc_new_encoder() less oopsy
The point of the WARN was to print something, not oops
straight up. Currently that is precisely what happens
if we can't find the connector for the crtc in the atomic
state. Get the dev pointer from the atomic state instead
of the potentially NULL encoder to avoid that.
(cherry picked from commit 3b6692357f70498f617ea1b31a0378070a0acf1c)
OSV
CVE-2023-53571: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intel_get_crtc_new_encoder() less oopsy The point of the WARN was t
osv·2025-10-04·CVSS 5.5
CVE-2023-53571 [MEDIUM] CVE-2023-53571: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intel_get_crtc_new_encoder() less oopsy The point of the WARN was t
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intel_get_crtc_new_encoder() less oopsy The point of the WARN was to print something, not oops straight up. Currently that is precisely what happens if we can't find the connector for the crtc in the atomic state. Get the dev pointer from the atomic state instead of the potentially NULL encoder to avoid that. (cherry picked from commit 3b6692357f70498f617ea1b31a0378070a0acf1c)
Red Hat
kernel: drm/i915: Make intel_get_crtc_new_encoder() less oopsy
vendor_redhat·2025-10-04·CVSS 5.5
CVE-2023-53571 [MEDIUM] CWE-476 kernel: drm/i915: Make intel_get_crtc_new_encoder() less oopsy
kernel: drm/i915: Make intel_get_crtc_new_encoder() less oopsy
In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Make intel_get_crtc_new_encoder() less oopsy
The point of the WARN was to print something, not oops
straight up. Currently that is precisely what happens
if we can't find the connector for the crtc in the atomic
state. Get the dev pointer from the atomic state instead
of the potentially NULL encoder to avoid that.
(cherry picked from commit 3b6692357f70498f617ea1b31a0378070a0acf1c)
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat
Debian
CVE-2023-53571: linux - In the Linux kernel, the following vulnerability has been resolved: drm/i915: M...
vendor_debian·2023·CVSS 5.5
CVE-2023-53571 [MEDIUM] CVE-2023-53571: linux - In the Linux kernel, the following vulnerability has been resolved: drm/i915: M...
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intel_get_crtc_new_encoder() less oopsy The point of the WARN was to print something, not oops straight up. Currently that is precisely what happens if we can't find the connector for the crtc in the atomic state. Get the dev pointer from the atomic state instead of the potentially NULL encoder to avoid that. (cherry picked from commit 3b6692357f70498f617ea1b31a0378070a0acf1c)
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0fe6ef82e4f4764e8f556632e4cd93d78d448e99https://git.kernel.org/stable/c/54202488c835dab8c648acd107f0bb8eaa699894https://git.kernel.org/stable/c/631420b06597a33c72b6dcef78d1c2dea17f452dhttps://git.kernel.org/stable/c/780f303233c35eeb5132e3ee1cbc8f4cebe86dd2https://git.kernel.org/stable/c/8cd725315c559a8a4d18ac1d7fce1d6b9a667529https://git.kernel.org/stable/c/fd8b0abecdf66379e9d25d7448b942b5be379cb2
2025-10-04
Published