In the Linux kernel, the following vulnerability has been resolved:
ACPI: video: check for error while searching for backlight device parent
If acpigetparent() called in acpivideodevregisterbacklight() fails, for example, because acpiutacquiremutex() fails inside acpigetparent), this can lead to incorrect (uninitialized) acpiparent handle being passed to acpigetpci_dev() for detecting the parent pci device.
Check acpigetparent() result and set parent device only in case of success.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52693.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52693.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a370502a5681986f9828e43be75ce26c6ab24af",
"digest": {
"function_hash": "134367455482539604053888682068985334081",
"length": 1474.0
},
"id": "CVE-2023-52693-1914a149",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd45faf4973746c4f30ea41eec864e5cf191099",
"digest": {
"function_hash": "256680681476842239486028302419871410364",
"length": 1427.0
},
"id": "CVE-2023-52693-24224b46",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39af144b6d01d9b40f52e5d773e653957e6c379c",
"digest": {
"function_hash": "327624623503218459912510690241266670712",
"length": 1420.0
},
"id": "CVE-2023-52693-953429cb",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39af144b6d01d9b40f52e5d773e653957e6c379c",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"id": "CVE-2023-52693-a28a7e79",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a370502a5681986f9828e43be75ce26c6ab24af",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"id": "CVE-2023-52693-bc6f9e4d",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@556f02699d33c1f40b1b31bd25828ce08fa165d8",
"digest": {
"function_hash": "115129844047858642999670679213046880908",
"length": 1476.0
},
"id": "CVE-2023-52693-ca8654ab",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd45faf4973746c4f30ea41eec864e5cf191099",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"id": "CVE-2023-52693-ec6558c6",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@556f02699d33c1f40b1b31bd25828ce08fa165d8",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"id": "CVE-2023-52693-ee0a8ae9",
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
}
}
]