CVE-2023-54147 — Missing Release of Memory after Effective Lifetime in Linux
7 documents6 sources
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the check for the return value of the ida_alloc in order to avoid
NULL pointer dereference.
Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order
to avoid memory leak.
Affected Packages4 packages
▶CVEListV5linux/linux61890ccaefaff89f5babd2c8412fd222c3f5fe38 — 51fc1880e47421ee7b192372e8e86b7bbba40776+4
🔴Vulnerability Details
3GHSA▶
GHSA-xh2f-j4vc-q8qj: In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the chec↗2025-12-24
OSV▶
CVE-2023-54147: In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check↗2025-12-24