CVE-2023-53325 drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()

Medium 5.5 Published Updated

A null pointer dereference in the MediaTek DisplayPort driver can cause a kernel panic during AUX transfers before bridge attachment, leading to denial of service.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2023-53325?

CVE-2023-53325 is a medium-severity vulnerability in Linux kernel, published on 16 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()

Change logging from drm_{err,info}() to dev_{err,info}() in functions mtk_dp_aux_transfer() and mtk_dp_aux_do_transfer(): this will be essential to avoid getting NULL pointer kernel panics if any kind of error happens during AUX transfers happening before the bridge is attached.

This may potentially start happening in a later commit implementing aux-bus support, as AUX transfers will be triggered from the panel driver (for EDID) before the mtk-dp bridge gets attached, and it's done in preparation for the same.

Weakness: CWE-476

Which versions are affected by CVE-2023-53325?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2023-53325?

Apply the vendor's patch.

Is CVE-2023-53325 being exploited?

There is no known exploitation of CVE-2023-53325 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as BELL-CVE-2023-53325, DEBIAN-CVE-2023-53325, GHSA-839c-hg3j-vc54, ROOT-OS-UBUNTU-2204-CVE-2023-53325, UBUNTU-CVE-2023-53325.

Is CVE-2023-53325 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free