Device Management Vulnerability in Linux Kernel Affecting Display Controllers

CVE-2023-53851

What is CVE-2023-53851?

A vulnerability exists in the Linux kernel related to the management of display controllers, particularly within the DRM subsystem. The issue arises during probe deferrals where the EDP panel device's memory allocation may lead to a use-after-free condition due to improper handling of the aux bus when the DP controller is torn down. This can result in a corrupt EDID being logged or KASAN faults occurring. The proposed solution involves explicit depopulation of the aux bus during error paths and unbinding processes to mitigate these security risks.

References