In the Linux kernel, the following vulnerability has been resolved:
media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
When ipubridgeparserotation() and ipubridgeparseorientation() run sensor->adev is not set yet.
So if either of the dev_warn() calls about unknown values are hit this will lead to a NULL pointer deref.
Set sensor->adev earlier, with a borrowed ref to avoid making unrolling on errors harder, to fix this.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53336.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53336.json"
[
{
"id": "CVE-2023-53336-8b2d6151",
"target": {
"file": "drivers/media/pci/intel/ipu-bridge.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@284be5693163343e1cf17c03917eecd1d6681bcf",
"digest": {
"threshold": 0.9,
"line_hashes": [
"102929841191963266326431149450994559666",
"191729168067833808218397775235536578264",
"52681591378584848223918714540493508829",
"150051357640277940826534247900708134453"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53336-e351a4c2",
"target": {
"function": "ipu_bridge_connect_sensor",
"file": "drivers/media/pci/intel/ipu-bridge.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@284be5693163343e1cf17c03917eecd1d6681bcf",
"digest": {
"function_hash": "139118743132765207496677223277515721872",
"length": 1696.0
},
"signature_type": "Function"
}
]