CVE-2023-3220
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
An issue was discovered in the Linux kernel through 6.1-rc8 related to the lack of checking the return value of kzalloc() in dpu_crtc_atomic_check, leading to a NULL Pointer Dereference.
Risk Assessment
The lack of proper checking of the return value from kzalloc() may lead to system crashes, posing a risk to the stability and security of applications running on this kernel.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes fixes for this vulnerability and to implement additional error checks in the code.
Original NVD description (English source)
An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.