CVE-2023-52888

media: mediatek: vcodec: Only free buffer VA that is not NULL

published July 30, 2024

CVSS
—
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Only free buffer VA that is not NULL

In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly

called only when the buffer to free exists, there are some instances

that didn't do the check and triggered warnings in practice.

We believe those checks were forgotten unintentionally. Add the checks

back to fix the warnings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Published
2024-07-30T07:45Z
EPSS history
Timeline
  • 30 JUL 07:45Z
    media: mediatek: vcodec: Only free buffer VA that is not NULL
    cvelistv5