CVE-2023-53085

drm/edid: fix info leak when failing to get panel id

Description

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/598c42c78919117dc0d235ae22d17ad642377483
https://git.kernel.org/stable/c/4d8457fe0eb9c80ff7795cf8a30962128b71d853

Frequently Asked Questions

What is the severity of CVE-2023-53085?: CVE-2023-53085 has not yet been assigned a CVSS score.
How to fix CVE-2023-53085?: To fix CVE-2023-53085, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-53085 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-53085 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-53085?: CVE-2023-53085 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.