CVE-2023-53864
In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() When disabling overlay plane in mxsfb_plane_overlay_atomic_update(), overlay plane's framebuffer pointer is NULL. So, dereferencing it would cause a kernel Oops(NULL pointer dereferencing). Fix the issue by disabling overlay plane in mxsfb_plane_overlay_atomic_disable() instead.
Affected versions
Linux kernel versions
5.19
and later are affected. Fixed in
6.1.54,
6.5.4,
6.6
and their respective stable series.
References
The following references provide additional information about CVE-2023-53864 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/0f98de0a11d29821d9448114178ddc1b1fe32a18
-
PatchKernel patch commithttps://git.kernel.org/stable/c/8bf2d4ca521d3acb57fc1607386e749b3cc92aaf
-
PatchKernel patch commithttps://git.kernel.org/stable/c/aa656d48e871a1b062e1bbf9474d8b831c35074c
Frequently asked questions
-
What is CVE-2023-53864?
CVE-2023-53864 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.19 onward and has been patched in 6.1.54, 6.5.4 and 6.6. CVE-2023-53864 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2023-53864?
Yes — CVE-2023-53864 has been patched. Fixed versions include 6.1.54, 6.5.4 and 6.6. If you are running Linux kernel 5.19 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2023-53864 actively exploited?
No — CVE-2023-53864 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.