In the Linux kernel, the following vulnerability has been resolved:
ACPI: video: check for error while searching for backlight device parent
If acpigetparent() called in acpivideodevregisterbacklight() fails, for example, because acpiutacquiremutex() fails inside acpigetparent), this can lead to incorrect (uninitialized) acpiparent handle being passed to acpigetpci_dev() for detecting the parent pci device.
Check acpigetparent() result and set parent device only in case of success.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52693.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52693.json"
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a370502a5681986f9828e43be75ce26c6ab24af",
"signature_type": "Function",
"digest": {
"function_hash": "134367455482539604053888682068985334081",
"length": 1474.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-1914a149",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4e1a0ef0b4782854c9b77a333ca912b392bed2f",
"signature_type": "Function",
"digest": {
"function_hash": "115129844047858642999670679213046880908",
"length": 1476.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-1b8fc701",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2124c5bc22948fc4d09a23db4a8acdccc7d21e95",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-1bd6bfd2",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd45faf4973746c4f30ea41eec864e5cf191099",
"signature_type": "Function",
"digest": {
"function_hash": "256680681476842239486028302419871410364",
"length": 1427.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-24224b46",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72884ce4e10417b1233b614bf134da852df0f15f",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-54be583c",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4e1a0ef0b4782854c9b77a333ca912b392bed2f",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-5f6462ea",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2124c5bc22948fc4d09a23db4a8acdccc7d21e95",
"signature_type": "Function",
"digest": {
"function_hash": "256680681476842239486028302419871410364",
"length": 1427.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-8ea83b8e",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39af144b6d01d9b40f52e5d773e653957e6c379c",
"signature_type": "Function",
"digest": {
"function_hash": "327624623503218459912510690241266670712",
"length": 1420.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-953429cb",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39af144b6d01d9b40f52e5d773e653957e6c379c",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-a28a7e79",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72884ce4e10417b1233b614bf134da852df0f15f",
"signature_type": "Function",
"digest": {
"function_hash": "327624623503218459912510690241266670712",
"length": 1420.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-b2eace97",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a370502a5681986f9828e43be75ce26c6ab24af",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-bc6f9e4d",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@556f02699d33c1f40b1b31bd25828ce08fa165d8",
"signature_type": "Function",
"digest": {
"function_hash": "115129844047858642999670679213046880908",
"length": 1476.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-ca8654ab",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd45faf4973746c4f30ea41eec864e5cf191099",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-ec6558c6",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@556f02699d33c1f40b1b31bd25828ce08fa165d8",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-ee0a8ae9",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e3a2b9b4039bb4d136dca59fb31e06465e056f3",
"signature_type": "Line",
"digest": {
"line_hashes": [
"178961683959283028173185651557455281113",
"325982724042550873871072927798160042209",
"292813777303288347580693170580710216155",
"95011896259503082624567856539218492476",
"231714064002266123523487435219746595305",
"313325335802694318896813890573306775441",
"50452749512705686999957673091178984195",
"236112873162940357983388922086840849936"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c"
},
"id": "CVE-2023-52693-efb796bb",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e3a2b9b4039bb4d136dca59fb31e06465e056f3",
"signature_type": "Function",
"digest": {
"function_hash": "115129844047858642999670679213046880908",
"length": 1476.0
},
"deprecated": false,
"target": {
"file": "drivers/acpi/acpi_video.c",
"function": "acpi_video_dev_register_backlight"
},
"id": "CVE-2023-52693-f5fb3817",
"signature_version": "v1"
}
]