MEDIUM

CVE-2026-53066

Linux Linux Kernel 2026-06-24 CVSS v3.1
CVSS
5.5

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/sun4i: backend: fix error pointer dereference

The function drm_atomic_get_plane_state() can return an error pointer
and is not checked for it. Add error pointer check.

Detected by Smatch:
drivers/gpu/drm/sun4i/sun4i_backend.c:496 sun4i_backend_atomic_check() error:
'plane_state' dereferencing possible ERR_PTR()

Summary dbcve.org

In the Linux kernel DRM driver for Allwinner sun4i graphics, the function sun4i_backend_atomic_check() calls drm_atomic_get_plane_state() but fails to check if the returned value is an error pointer before dereferencing it. This can lead to kernel panic or undefined behavior when an ERR_PTR is dereferenced.

Mitigation

Add an error pointer check immediately after the drm_atomic_get_plane_state() call in sun4i_backend_atomic_check() and return the error if the result is an ERR_PTR.

Patch Commit

Weakness (CWE)

CWE-476 NULL Pointer Dereference

EPSS Score

0.11%
Probability of exploitation in next 30 days
1.7th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE