CVE-2023-53325 drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
A null pointer dereference in the MediaTek DisplayPort driver can cause a kernel panic during AUX transfers before bridge attachment, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53325?
CVE-2023-53325 is a medium-severity vulnerability in Linux kernel, published on 16 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
Change logging from drm_{err,info}() to dev_{err,info}() in functions mtk_dp_aux_transfer() and mtk_dp_aux_do_transfer(): this will be essential to avoid getting NULL pointer kernel panics if any kind of error happens during AUX transfers happening before the bridge is attached.
This may potentially start happening in a later commit implementing aux-bus support, as AUX transfers will be triggered from the panel driver (for EDID) before the mtk-dp bridge gets attached, and it's done in preparation for the same.
Weakness: CWE-476
Which versions are affected by CVE-2023-53325?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53325?
Apply the vendor's patch.
Is CVE-2023-53325 being exploited?
There is no known exploitation of CVE-2023-53325 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2023-53325, DEBIAN-CVE-2023-53325, GHSA-839c-hg3j-vc54, ROOT-OS-UBUNTU-2204-CVE-2023-53325, UBUNTU-CVE-2023-53325.