CVE-2023-52693

ACPI: video: check for error while searching for backlight device parent

MEDIUM

5.5

CVSS Score

Published: May 17, 2024 at 02:27 PM UTC

Updated: June 17, 2026 at 06:43 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpi_get_parent() called in acpi_video_dev_register_backlight() fails, for example, because acpi_ut_acquire_mutex() fails inside acpi_get_parent), this can lead to incorrect (uninitialized) acpi_parent handle being passed to acpi_get_pci_dev() for detecting the parent pci device. Check acpi_get_parent() result and set parent device only in case of success. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0

Linux Kernel · Linux

95%

2.6.39 ≤ v < 4.19.3062.6.39 ≤ v < 5.10.2092.6.39 ≤ v < 5.15.1482.6.39 ≤ v < 5.4.2682.6.39 ≤ v < 6.1.752.6.39 ≤ v < 6.6.142.6.39 ≤ v < 6.7.22.6.39 ≤ v < 6.84.20 ≤ v < 5.4.2685.11 ≤ v < 5.15.1485.16 ≤ v < 6.1.755.5 ≤ v < 5.10.2096.2 ≤ v < 6.6.146.7 ≤ v < 6.7.22.6.399661e92c10a9775243c1ecb73373528ed8725a10

Vendor states this is fixed in 1e3a2b9b4039bb4d136dca59fb31e06465e056f3 (fixed)

Vendor states this is fixed in 2124c5bc22948fc4d09a23db4a8acdccc7d21e95 (fixed)

Vendor states this is fixed in 39af144b6d01d9b40f52e5d773e653957e6c379c (fixed)

Vendor states this is fixed in 3a370502a5681986f9828e43be75ce26c6ab24af (fixed)

Vendor states this is fixed in 556f02699d33c1f40b1b31bd25828ce08fa165d8 (fixed)

Vendor states this is fixed in 72884ce4e10417b1233b614bf134da852df0f15f (fixed)

Vendor states this is fixed in c4e1a0ef0b4782854c9b77a333ca912b392bed2f (fixed)

Vendor states this is fixed in ccd45faf4973746c4f30ea41eec864e5cf191099 (fixed)

Vendor states this is fixed in 2.6.39 (unaffected)

Vendor states this is fixed in 4.19.306 (unaffected)

Vendor states this is fixed in 5.10.209 (unaffected)

Vendor states this is fixed in 5.15.148 (unaffected)