CVE-2023-3220

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1-rc8

Description The issue is related to the function dpu crtc atomic check() in the drivers/gpu/drm/msm/disp/dpu1/dpu crtc.c module of the MSM DRM Linux kernel driver, which is associated with a null pointer dereference. This could allow an attacker to cause a denial of service. The problem arises because dpu crtc atomic check() lacks a check of the return value of kzalloc(), leading to a NULL pointer dereference.

Recommendations For Linux kernel versions prior to 6.1-rc8, as a temporary workaround, consider disabling the dpu crtc atomic check() function until a patch is available. Restrict access to the vulnerable module drivers/gpu/drm/msm/disp/dpu1/dpu crtc.c to minimize the risk of exploitation.