In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Fix NULL ptr deref by checking new_crtc_state

intel_atomic_get_new_crtc_state can return NULL, unless crtc state wasn't
obtained previously with intel_atomic_get_crtc_state, so we must check it
for NULLness here, just as in many other places, where we can't guarantee
that intel_atomic_get_crtc_state was called.
We are currently getting NULL ptr deref because of that, so this fix was
confirmed to help.

(cherry picked from commit 1d5b09f8daf859247a1ea65b0d732a24d88980d8)

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00025.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
74a75dc908692dd0548209004e53832c02433c0c affected < dbf25cc21beff4fd2e730573845a266504b21bb2
74a75dc908692dd0548209004e53832c02433c0c affected < 8b3c0d2d1685ba40b0af4ee1f8d8824a73870f88
74a75dc908692dd0548209004e53832c02433c0c affected < a41d985902c153c31c616fe183cf2ee331e95ecb
Linux Linux affected
Version Status Constraints
5.16 affected —
0 unaffected < 5.16
6.1.30 unaffected ≤ 6.1.*
6.3.4 unaffected ≤ 6.3.*
6.4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/8b3c0d2d1685ba40b0af4ee1f8d8824a73870f88 cve-icon cve-icon
https://git.kernel.org/stable/c/a41d985902c153c31c616fe183cf2ee331e95ecb cve-icon cve-icon
https://git.kernel.org/stable/c/dbf25cc21beff4fd2e730573845a266504b21bb2 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025120954-CVE-2023-53833-09d9@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53833 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53833 cve-icon
History

Wed, 10 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Tue, 09 Dec 2025 02:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL ptr deref by checking new_crtc_state intel_atomic_get_new_crtc_state can return NULL, unless crtc state wasn't obtained previously with intel_atomic_get_crtc_state, so we must check it for NULLness here, just as in many other places, where we can't guarantee that intel_atomic_get_crtc_state was called. We are currently getting NULL ptr deref because of that, so this fix was confirmed to help. (cherry picked from commit 1d5b09f8daf859247a1ea65b0d732a24d88980d8)
Title drm/i915: Fix NULL ptr deref by checking new_crtc_state
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-09T01:29:48.637Z

Reserved: 2025-12-09T01:27:17.825Z

Link: CVE-2023-53833

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-09T16:17:22.570

Modified: 2025-12-09T18:37:13.640

Link: CVE-2023-53833

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-12-09T00:00:00Z

Links: CVE-2023-53833 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.