CVE-2023-3355: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the system.

Affected products

• Linux Linux Kernel: before 6.1 (fixed in 6.1); version 6.1 only

Published 2023-06-28. Last modified 2026-06-17.