CVE-2023-53336

Source
https://cve.org/CVERecord?id=CVE-2023-53336
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53336.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53336
Downstream
BELL (1)
DEBIAN (1)
ECHO (1)
ROOT (1)
SUSE (10)
UBUNTU (1)
Related
Published
2025-09-17T14:56:30Z
Modified
2026-10-20T10:30:16Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
Details

In the Linux kernel, the following vulnerability has been resolved:

media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings

When ipu_bridge_parse_rotation() and ipu_bridge_parse_orientation() run sensor->adev is not set yet.

So if either of the dev_warn() calls about unknown values are hit this will lead to a NULL pointer deref.

Set sensor->adev earlier, with a borrowed ref to avoid making unrolling on errors harder, to fix this.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53336.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
485aa3df0dffa62d347ea4e0116f549338accc59
Fixed
bca783c943cefea97c27f02fdd16bf414e8057df
Fixed
3de35e29cfddfe6bff762b15bcfe8d80bebac6cb
Fixed
e08b091e33ecf6e4cb2c0c5820a69abe7673280b
Fixed
284be5693163343e1cf17c03917eecd1d6681bcf

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53336.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.4.16
Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.5.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53336.json"