CVE-2023-52888
mediumIn the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driv…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice. We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-07-30 08:15
Modified: 2026-10-30 13:17
NVD status: Modified
Last synced 3 days ago
Verified against the source API 2026-10-30 13:38 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥4.10 <6.6.39, ≥6.7 <6.9.9
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/303d01082edaf817ee2df53a40dca9da637a2c04
Patch / mitigation: https://git.kernel.org/stable/c/5c217253c76c94f76d1df31d0bbdcb88dc07be91
Patch / mitigation: https://git.kernel.org/stable/c/eb005c801ec70ff4307727bd3bd6e8280169ef32
Patch / mitigation: https://git.kernel.org/stable/c/303d01082edaf817ee2df53a40dca9da637a2c04
Patch / mitigation: https://git.kernel.org/stable/c/5c217253c76c94f76d1df31d0bbdcb88dc07be91
Patch / mitigation: https://git.kernel.org/stable/c/eb005c801ec70ff4307727bd3bd6e8280169ef32
References
- https://git.kernel.org/stable/c/303d01082edaf817ee2df53a40dca9da637a2c04 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/56d27b9fca840c68f67706e3cc5f2000c17bce39 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/5c217253c76c94f76d1df31d0bbdcb88dc07be91 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/eb005c801ec70ff4307727bd3bd6e8280169ef32 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/303d01082edaf817ee2df53a40dca9da637a2c04 af854a3a-2127-422b-91ae-364da2661108
- https://git.kernel.org/stable/c/5c217253c76c94f76d1df31d0bbdcb88dc07be91 af854a3a-2127-422b-91ae-364da2661108
- https://git.kernel.org/stable/c/eb005c801ec70ff4307727bd3bd6e8280169ef32 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-10-30 13:38 UTC · record ↗