Not yet scoredPublished Dec 24, 2025

CVE-2023-54018drm/msm/hdmi: Add missing check for alloc_ordered_workqueue

Updated under an hour ago (Oct 27, 2026, 3:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue as it may return NULL pointer and cause NULL pointer dereference in `hdmi_hdcp.c` and `hdmi_hpd.c`. Patchwork: https://patchwork.freedesktop.org/patch/517211/

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before b479485b24da1d572a0ce875537af31b02d2f915; from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before 392f7eb3946ab3780b931af723033e19f82c9134; from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before fc34608fa275fe6b3b17e171b63b8ca3aa1cbf09; from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before 1bab31a0969ca4ac90907a5d3b44af104229eafd; from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before 9a01ecc312e764ec4527ad49105a3ca799f1860c; from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before e55f93d674314f2fb69eba0dc24acfdf72805611; from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before ae5ca116a0c0ba9fc4123b1f1ec3c4f4d0d01b3f; from c6a57a50ad562a2e6fc6ac3218b710caea73a58b before afe4cb96153a0d8003e4e4ebd91b5c543e10df84	CNA record

References

References

https://git.kernel.org/stable/c/b479485b24da1d572a0ce875537af31b02d2f915
https://git.kernel.org/stable/c/392f7eb3946ab3780b931af723033e19f82c9134
https://git.kernel.org/stable/c/fc34608fa275fe6b3b17e171b63b8ca3aa1cbf09
https://git.kernel.org/stable/c/1bab31a0969ca4ac90907a5d3b44af104229eafd
https://git.kernel.org/stable/c/9a01ecc312e764ec4527ad49105a3ca799f1860c
https://git.kernel.org/stable/c/e55f93d674314f2fb69eba0dc24acfdf72805611
https://git.kernel.org/stable/c/ae5ca116a0c0ba9fc4123b1f1ec3c4f4d0d01b3f
https://git.kernel.org/stable/c/afe4cb96153a0d8003e4e4ebd91b5c543e10df84

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.