Riskcovery

CVE-2023-52888

media: mediatek: vcodec: Only free buffer VA that is not NULL

State
Published
Severity
Not scored
Published
Jul 30, 2024
Updated
Oct 30, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Only free buffer VA that is not NULL

In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.

We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 590577a4e5257ac3ed72999a94666ad6ba8f24bc to before 56d27b9fca840c68f67706e3cc5f2000c17bce39Affected
  • 590577a4e5257ac3ed72999a94666ad6ba8f24bc to before 5c217253c76c94f76d1df31d0bbdcb88dc07be91Affected
  • 590577a4e5257ac3ed72999a94666ad6ba8f24bc to before 303d01082edaf817ee2df53a40dca9da637a2c04Affected
  • 590577a4e5257ac3ed72999a94666ad6ba8f24bc to before eb005c801ec70ff4307727bd3bd6e8280169ef32Affected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.39 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.