Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.2

Linux kernel may crash if sound card opened without monitor

CVE-2023-52861 · published 2 years ago
Summary

A part of the Linux kernel that talks to certain display hardware could try to use a missing connection when no monitor is attached and a sound device is accessed, leading to a crash. The fix makes the system return an empty data block instead of accessing the missing connection. Update the Linux kernel to the latest version to apply the fix.

What to do
  • Update debian linux to version 6.1.64-1.
  • Update debian linux to version 6.6.8-1.
  • Update linux kernel to version 6.6.2.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian linux < 6.1.64-1
Fix: upgrade to 6.1.64-1
Debian:13 debian linux < 6.6.8-1
Fix: upgrade to 6.6.8-1
– linux linux_kernel >= 5.19, < 6.1.63
>= 6.2, < 6.5.12
>= 6.6, < 6.6.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.6.0, < 6.6.2
Fix: upgrade to 6.6.2
Original advisory text
drm: bridge: it66121: Fix invalid connector dereference
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121: Fix invalid connector dereference Fix the NULL pointer dereference when no monitor is connected, and the sound card is opened from userspace. Instead return an empty buffer (of zeroes) as the EDID information to the sound framework if there is no connector attached.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.2 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published21 May 2024
Updated4 Nov 2026
First seen11 Mar 2026
Sources
CVE-2023-52861 · OSV
CVE-2023-52861 · NVD
DEBIAN-CVE-2023-52861 · OSV
Track software like this
Free during beta