CVE-2023-52888

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Only free buffer VA that is not NULL

In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.

We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
LinuxLinux>= 590577a4e5257ac3ed72999a94666ad6ba8f24bc, < 56d27b9fca840c68f67706e3cc5f2000c17bce39; >= 590577a4e5257ac3ed72999a94666ad6ba8f24bc, < 5c217253c76c94f76d1df31d0bbdcb88dc07be91; >= 590577a4e5257ac3ed72999a94666ad6ba8f24bc, < 303d01082edaf817ee2df53a40dca9da637a2c04; >= 590577a4e5257ac3ed72999a94666ad6ba8f24bc, < eb005c801ec70ff4307727bd3bd6e8280169ef32
LinuxLinux4.10

References

Timeline

Published
Jul 30, 2024
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-528895.5In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb during sock creatioCVE-2023-52898.8Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.CVE-2023-528904.5NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would CVE-2023-528915.3A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5),CVE-2023-528927.5In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificatesCVE-2023-528935.5In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmi_get_variable We can get EFI variables witCVE-2023-528945.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() In GCVE-2023-528955.5In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: don't reissue in case of poll race on multishot request CVE-2023-528964.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota rescan and disable leading to NULL pointeCVE-2023-528974.7In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: do not warn on record without old_roots populated [BUG]CVE-2023-528984.7In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference when host dies Make sure xhci_free_CVE-2023-528995.5In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axi_chan_handle_err funct
CVE-2023-52888: Medium severity, CVSS 5.5 | Vulnix