CVE-2023-52888

CVE-2023-52888 is a Linux kernel vulnerability affecting the MediaTek vcodec driver, where vcodec memory free operations may attempt to free a NULL VA without proper checks. The root cause is an unguarded path in mtk_vcodec_mem_free() that can trigger warnings and, in practice, exposes a potentia...

CVE-2023-52888 media: mediatek: vcodec: Only free buffer VA that is not NULL

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driver, while mtkvcodecmemfree is mostly called only when the buffer to free exists, there are some instances that didn't do the check and...

CVE-2023-52888 media: mediatek: vcodec: Only free buffer VA that is not NULL

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driver, while mtkvcodecmemfree is mostly called only when the buffer to free exists, there are some instances that didn't do the check and...

CVE-2023-52888: Double Free

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driver, while mtkvcodecmemfree is mostly called only when the buffer to free exists, there are some instances that didn't do the check and...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the media:mediatek:vcodec module in mtkvcodecmemfree, which sometimes fails to check if a buffer is NULL,...