In the Linux kernel, the following vulnerability has been resolved:
ACPI: video: check for error while searching for backlight device parent
If acpigetparent() called in acpivideodevregisterbacklight() fails, for example, because acpiutacquiremutex() fails inside acpigetparent), this can lead to incorrect (uninitialized) acpiparent handle being passed to acpigetpci_dev() for detecting the parent pci device.
Check acpigetparent() result and set parent device only in case of success.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
{ "vanir_signatures": [ { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/acpi/acpi_video.c", "function": "acpi_video_dev_register_backlight" }, "id": "CVE-2023-52693-1914a149", "digest": { "length": 1474.0, "function_hash": "134367455482539604053888682068985334081" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a370502a5681986f9828e43be75ce26c6ab24af" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/acpi/acpi_video.c", "function": "acpi_video_dev_register_backlight" }, "id": "CVE-2023-52693-1b8fc701", "digest": { "length": 1476.0, "function_hash": "115129844047858642999670679213046880908" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4e1a0ef0b4782854c9b77a333ca912b392bed2f" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/acpi/acpi_video.c" }, "id": "CVE-2023-52693-1bd6bfd2", "digest": { "line_hashes": [ "178961683959283028173185651557455281113", "325982724042550873871072927798160042209", "292813777303288347580693170580710216155", "95011896259503082624567856539218492476", "231714064002266123523487435219746595305", "313325335802694318896813890573306775441", "50452749512705686999957673091178984195", "236112873162940357983388922086840849936" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2124c5bc22948fc4d09a23db4a8acdccc7d21e95" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/acpi/acpi_video.c" }, "id": "CVE-2023-52693-54be583c", "digest": { "line_hashes": [ "178961683959283028173185651557455281113", "325982724042550873871072927798160042209", "292813777303288347580693170580710216155", "95011896259503082624567856539218492476", "231714064002266123523487435219746595305", "313325335802694318896813890573306775441", "50452749512705686999957673091178984195", "236112873162940357983388922086840849936" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72884ce4e10417b1233b614bf134da852df0f15f" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/acpi/acpi_video.c" }, "id": "CVE-2023-52693-5f6462ea", "digest": { "line_hashes": [ "178961683959283028173185651557455281113", "325982724042550873871072927798160042209", "292813777303288347580693170580710216155", "95011896259503082624567856539218492476", "231714064002266123523487435219746595305", "313325335802694318896813890573306775441", "50452749512705686999957673091178984195", "236112873162940357983388922086840849936" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4e1a0ef0b4782854c9b77a333ca912b392bed2f" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/acpi/acpi_video.c", "function": "acpi_video_dev_register_backlight" }, "id": "CVE-2023-52693-8ea83b8e", "digest": { "length": 1427.0, "function_hash": "256680681476842239486028302419871410364" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2124c5bc22948fc4d09a23db4a8acdccc7d21e95" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/acpi/acpi_video.c", "function": "acpi_video_dev_register_backlight" }, "id": "CVE-2023-52693-b2eace97", "digest": { "length": 1420.0, "function_hash": "327624623503218459912510690241266670712" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72884ce4e10417b1233b614bf134da852df0f15f" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/acpi/acpi_video.c" }, "id": "CVE-2023-52693-bc6f9e4d", "digest": { "line_hashes": [ "178961683959283028173185651557455281113", "325982724042550873871072927798160042209", "292813777303288347580693170580710216155", "95011896259503082624567856539218492476", "231714064002266123523487435219746595305", "313325335802694318896813890573306775441", "50452749512705686999957673091178984195", "236112873162940357983388922086840849936" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a370502a5681986f9828e43be75ce26c6ab24af" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/acpi/acpi_video.c", "function": "acpi_video_dev_register_backlight" }, "id": "CVE-2023-52693-ca8654ab", "digest": { "length": 1476.0, "function_hash": "115129844047858642999670679213046880908" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@556f02699d33c1f40b1b31bd25828ce08fa165d8" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/acpi/acpi_video.c" }, "id": "CVE-2023-52693-ee0a8ae9", "digest": { "line_hashes": [ "178961683959283028173185651557455281113", "325982724042550873871072927798160042209", "292813777303288347580693170580710216155", "95011896259503082624567856539218492476", "231714064002266123523487435219746595305", "313325335802694318896813890573306775441", "50452749512705686999957673091178984195", "236112873162940357983388922086840849936" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@556f02699d33c1f40b1b31bd25828ce08fa165d8" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/acpi/acpi_video.c" }, "id": "CVE-2023-52693-efb796bb", "digest": { "line_hashes": [ "178961683959283028173185651557455281113", "325982724042550873871072927798160042209", "292813777303288347580693170580710216155", "95011896259503082624567856539218492476", "231714064002266123523487435219746595305", "313325335802694318896813890573306775441", "50452749512705686999957673091178984195", "236112873162940357983388922086840849936" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e3a2b9b4039bb4d136dca59fb31e06465e056f3" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/acpi/acpi_video.c", "function": "acpi_video_dev_register_backlight" }, "id": "CVE-2023-52693-f5fb3817", "digest": { "length": 1476.0, "function_hash": "115129844047858642999670679213046880908" }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e3a2b9b4039bb4d136dca59fb31e06465e056f3" } ] }