Null Pointer Dereference in Linux Kernel's IPU Bridge Component

CVE-2023-53336

What is CVE-2023-53336?

A vulnerability in the Linux kernel's IPU bridge component can lead to a null pointer dereference during the parsing of SSDB and PLD warnings. Specifically, if the functions ipu_bridge_parse_rotation() or ipu_bridge_parse_orientation() are executed before the sensor->adev pointer is initialized, any warnings regarding unknown values can trigger a crash. The issue has been addressed by ensuring that sensor->adev is set earlier in the execution flow, thus preventing potential crashes from occurring. Users and administrators are advised to apply the latest security updates to mitigate this vulnerability.

References