CVE-2023-54018

drm/msm/hdmi: Add missing check for alloc_ordered_workqueue

N/A
Published: December 24, 2025 at 10:55 AM UTC
Updated: June 17, 2026 at 06:46 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue as it may return NULL pointer and cause NULL pointer dereference in `hdmi_hdcp.c` and `hdmi_hpd.c`. Patchwork: https://patchwork.freedesktop.org/patch/517211/

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.3 ≤ v < 4.14.3084.3 ≤ v < 4.19.2764.3 ≤ v < 5.10.1734.3 ≤ v < 5.15.994.3 ≤ v < 5.4.2354.3 ≤ v < 6.1.164.3 ≤ v < 6.2.34.3 ≤ v < 6.34.3c6a57a50ad562a2e6fc6ac3218b710caea73a58b
Vendor states this is fixed in 1bab31a0969ca4ac90907a5d3b44af104229eafd (fixed)
Vendor states this is fixed in 392f7eb3946ab3780b931af723033e19f82c9134 (fixed)
Vendor states this is fixed in 9a01ecc312e764ec4527ad49105a3ca799f1860c (fixed)
Vendor states this is fixed in ae5ca116a0c0ba9fc4123b1f1ec3c4f4d0d01b3f (fixed)
Vendor states this is fixed in afe4cb96153a0d8003e4e4ebd91b5c543e10df84 (fixed)
Vendor states this is fixed in b479485b24da1d572a0ce875537af31b02d2f915 (fixed)
Vendor states this is fixed in e55f93d674314f2fb69eba0dc24acfdf72805611 (fixed)
Vendor states this is fixed in fc34608fa275fe6b3b17e171b63b8ca3aa1cbf09 (fixed)
Vendor states this is fixed in 4.14.308 (unaffected)
Vendor states this is fixed in 4.19.276 (unaffected)
Vendor states this is fixed in 4.3 (unaffected)
Vendor states this is fixed in 5.10.173 (unaffected)
Vendor states this is fixed in 5.15.99 (unaffected)
Vendor states this is fixed in 5.4.235 (unaffected)
Vendor states this is fixed in 6.1.16 (unaffected)
Vendor states this is fixed in 6.2.3 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card