CVE-2023-54263

A flaw was found in the Linux kernel's nouveau graphics driver for NVIDIA GPUs. The hpd_irq_lock spinlock is not initialized for PIOR (Parallel Interface Output Resource) DisplayPort connectors. This missing initialization causes a kernel oops on systems with ANX9805 DP encoders when hotplug detection operations access the uninitialized lock.

This issue affects a narrow subset of systems: those with NVIDIA graphics cards using the nouveau driver combined with ANX9805 DisplayPort encoder hardware. Most users will not encounter this bug as it requires specific external DP encoder hardware. The crash occurs during display hotplug events on affected systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the nouveau module from being loaded and use an alternative driver if available. See https://access.redhat.com/solutions/41278 for instructions.