Linux Kernel Vulnerability in Mediatek DisplayPort AUX Transfers

CVE-2023-53325

What is CVE-2023-53325?

A vulnerability in the Linux kernel affects the Mediatek DisplayPort functionality, specifically affecting AUX transfers. The issue arises from a change in logging mechanisms within the mtk_dp_aux_transfer() and mtk_dp_aux_do_transfer() functions. The logging shift to dev_{err,info}() is critical for preventing potential NULL pointer kernel panics during AUX transfers that occur prior to the attachment of the mtk-dp bridge, particularly as AUX transfers may be initiated by the panel driver for EDID handling. This change addresses a significant issue that could lead to system instability or crashes if errors occur during the transfer process.

References