Log in Start free

Vulnerability · Published Sep 18, 2025 · Assigned by Linux

CVE-2023-53425media: platform: mediatek: vpu: fix NULL ptr dereference

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.1%top 95.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr dereference If pdev is NULL, then it is still dereferenced. This fixes this smatch warning: drivers/media/platform/mediatek/vpu/mtk_vpu.c:570 vpu_load_firmware() warn: address of NULL pointer 'pdev'

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DEBIAN-CVE-2023-53425
Debian:13linux6.4.13-1DEBIAN-CVE-2023-53425
Debian:14linux6.4.13-1DEBIAN-CVE-2023-53425
Ubuntu:22.04:LTSlinux5.15.0-91.101UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-aws5.15.0-1051.56UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-azure5.15.0-1053.61UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1053.61.1UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-gcp5.15.0-1048.56UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-gke5.15.0-1048.53UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1034.40UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-ibm5.15.0-1044.47UBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1046.52UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-kvm5.15.0-1048.53UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-91.101UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1042.42UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1020.20UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1007.7UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-oracle5.15.0-1049.55UBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-raspi5.15.0-1044.47UBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53425
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53425
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1027.31UBUNTU-CVE-2023-53425

Affected products (as reported)

VendorProductVersions
Linux Linux 3003a180ef6b9462f3cccc2a89884ef2332d2a1c – before 099e929e7477f37ca16738fc158d7101c0189ca13003a180ef6b9462f3cccc2a89884ef2332d2a1c – before 1b3f25d3894a091abc247eadab266a2c9be643893003a180ef6b9462f3cccc2a89884ef2332d2a1c – before c1c5826223ae05a48d21f6708c6f34ee9006238c3003a180ef6b9462f3cccc2a89884ef2332d2a1c – before 2caeb722f0ea5d2d24af30bb1753a89d449b6aa03003a180ef6b9462f3cccc2a89884ef2332d2a1c – before 776b34615a29551d69d82a0082e7319d5ea284bd3003a180ef6b9462f3cccc2a89884ef2332d2a1c – before b7bd48f0be84e24d21aa3a8f59a8a9cb8633a1c43003a180ef6b9462f3cccc2a89884ef2332d2a1c – before 4d299e6e0ac3cf8ab4517dc29c9294bc4bf723983003a180ef6b9462f3cccc2a89884ef2332d2a1c – before 3df55cd773e8603b623425cc97b05e542854ad27
Linux Linux 4.8

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References