Log in Start free

Vulnerability · Published Jul 30, 2024 · Assigned by Linux

CVE-2023-52888media: mediatek: vcodec: Only free buffer VA that is not NULL

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 85.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice. We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2023-52888
Debian:13linux6.9.9-1DEBIAN-CVE-2023-52888
Debian:14linux6.9.9-1DEBIAN-CVE-2023-52888
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux6.8.0-48.48UBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux6.8.0-48.48USN-7089-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-aws6.8.0-1018.20USN-7089-3
Ubuntu:24.04:LTSlinux-aws6.8.0-1018.20UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1018.19~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1018.19~22.04.1USN-7089-3
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-azure6.8.0-1017.20USN-7089-2
Ubuntu:24.04:LTSlinux-azure6.8.0-1017.20UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1017.20~22.04.1USN-7090-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1017.20~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-gcp6.8.0-1017.19UBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-gcp6.8.0-1017.19USN-7089-2
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1017.19~22.04.1USN-7089-1
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-gke6.8.0-1013.17USN-7089-6
Ubuntu:24.04:LTSlinux-gke6.8.0-1013.17UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4UBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4USN-7156-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-48.48~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-48.48~22.04.1USN-7089-1
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-ibm6.8.0-1015.15USN-7089-2
Ubuntu:24.04:LTSlinux-ibm6.8.0-1015.15UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-48.48.3UBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-48.48.3USN-7089-7
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-48.48.3~22.04.1USN-7089-7
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-48.48.3~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1017.19USN-7095-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1017.19UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1017.19~22.04.1USN-7095-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1017.19.1USN-7095-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1017.19.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1016.16USN-7089-4
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1016.16UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-oracle6.8.0-1015.16USN-7089-3
Ubuntu:24.04:LTSlinux-oracle6.8.0-1015.16UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1015.15~22.04.1USN-7089-3
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-raspi6.8.0-1014.16UBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-raspi6.8.0-1014.16USN-7089-5
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-riscv6.8.0-48.48.1UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-48.48.1~22.04.2UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-52888
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1009.10UBUNTU-CVE-2023-52888
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2023-52888

Affected products (as reported)

VendorProductVersions
Linux Linux 590577a4e5257ac3ed72999a94666ad6ba8f24bc – before 56d27b9fca840c68f67706e3cc5f2000c17bce39590577a4e5257ac3ed72999a94666ad6ba8f24bc – before 5c217253c76c94f76d1df31d0bbdcb88dc07be91590577a4e5257ac3ed72999a94666ad6ba8f24bc – before 303d01082edaf817ee2df53a40dca9da637a2c04590577a4e5257ac3ed72999a94666ad6ba8f24bc – before eb005c801ec70ff4307727bd3bd6e8280169ef32
Linux Linux 4.10

References