CVE-2023-53678 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 98.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 7

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not initialized for some reason - in practice on platforms without display - suspending fbdev should be skipped during system suspend, fix this up. While at it add an assert that suspending fbdev only happens with the display present. This fixes the following: [ 91.227923] PM: suspend entry (s2idle) [ 91.254598] Filesystems sync: 0.025 seconds [ 91.2705…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel6.1 — 6.1.18+1
▶Debianlinux/linux_kernel< 6.1.20-1+2
▶CVEListV5linux/linuxf8cc091e05305231c8f747ca253a90ff0cea60b9 — 27b5871abd5cc068c549fd23062c82e257fc0b9c+3
▶debiandebian/linux< linux 6.1.20-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53678: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not initi↗2025-10-07
▶
GHSA
GHSA-xfj7-4ww9-wpqr: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not ini↗2025-10-07
▶

📋Vendor Advisories

2
Red Hat
kernel: drm/i915: Fix system suspend without fbdev being initialized↗2025-10-07
▶
Debian
CVE-2023-53678: linux - In the Linux kernel, the following vulnerability has been resolved: drm/i915: F...↗2023
▶