Memory Allocation Flaw in Linux Kernel Affects Device Driver Functionality

CVE-2023-53284

What is CVE-2023-53284?

A memory allocation vulnerability in the Linux kernel relates to a failure in properly handling instances where the memory allocation function, devm_kzalloc(), returns NULL. Specifically, in the device driver functionality for display data path (dpu_writeback_init), a NULL pointer dereference can occur if dpu_wb_conn is not checked for null before usage. This oversight can lead to system instability and undesired behavior in applications relying on proper device driver operation.

References