CVE-2023-54147
published 2025-12-24CVE-2023-54147: In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the…
PriorityP421medium5.3
EPSS
0.17%
7.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the check for the return value of the ida_alloc in order to avoid
NULL pointer dereference.
Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order
to avoid memory leak.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < 51fc1880e47421ee7b192372e8e86b7bbba40776 | 51fc1880e47421ee7b192372e8e86b7bbba40776 |
| linux | linux | >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < 4c173a65a2b1cc0556c3f6f0bab82e4fdb449522 | 4c173a65a2b1cc0556c3f6f0bab82e4fdb449522 |
| linux | linux | >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < 22b72cad501fb75500cc60af4d92de3066fb6fc2 | 22b72cad501fb75500cc60af4d92de3066fb6fc2 |
| linux | linux | >= 61890ccaefaff89f5babd2c8412fd222c3f5fe38 < d00f592250782538cda87745607695b0fe27dcd4 | d00f592250782538cda87745607695b0fe27dcd4 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 6.1.0 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 6.2.0 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3.0 < 6.3.2 | 6.3.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: platform: mtk-mdp3: Add missing check and free for ida_alloc
vendor_redhat·2025-12-24
CVE-2023-54147 kernel: media: platform: mtk-mdp3: Add missing check and free for ida_alloc
kernel: media: platform: mtk-mdp3: Add missing check and free for ida_alloc
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the check for the return value of the ida_alloc in order to avoid
NULL pointer dereference.
Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order
to avoid memory leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Ha
Debian
CVE-2023-54147: linux - In the Linux kernel, the following vulnerability has been resolved: media: plat...
vendor_debian·2023
CVE-2023-54147 CVE-2023-54147: linux - In the Linux kernel, the following vulnerability has been resolved: media: plat...
In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the return value of the ida_alloc in order to avoid NULL pointer dereference. Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order to avoid memory leak.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
GHSA
GHSA-xh2f-j4vc-q8qj: In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the chec
ghsa_unreviewed·2025-12-24
CVE-2023-54147 GHSA-xh2f-j4vc-q8qj: In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the chec
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the check for the return value of the ida_alloc in order to avoid
NULL pointer dereference.
Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order
to avoid memory leak.
OSV
CVE-2023-54147: In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check
osv·2025-12-24
CVE-2023-54147 CVE-2023-54147: In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check
In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the return value of the ida_alloc in order to avoid NULL pointer dereference. Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order to avoid memory leak.
OSV
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
osv·2025-12-24
CVE-2023-54147 media: platform: mtk-mdp3: Add missing check and free for ida_alloc
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the check for the return value of the ida_alloc in order to avoid
NULL pointer dereference.
Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order
to avoid memory leak.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54147 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.3
CVE-2023-54147 [MEDIUM] CVE-2023-54147 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54147 :
Linux Debian vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the check for the return value of the ida_alloc in order to avoid
NULL pointer dereference.
Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order
to avoid memory leak.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Debian
Linux Ubuntu
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 7.4
Exploitation Probability (EPSS) N/A
Affected packages and libraries
linux-gcp-fips
linux
Sources
NVD
Debian 12, 13, 14 Has Fix Added at:
Bugzilla
CVE-2023-54147 kernel: media: platform: mtk-mdp3: Add missing check and free for ida_alloc
bugzilla·2025-12-24
CVE-2023-54147 CVE-2023-54147 kernel: media: platform: mtk-mdp3: Add missing check and free for ida_alloc
CVE-2023-54147 kernel: media: platform: mtk-mdp3: Add missing check and free for ida_alloc
In the Linux kernel, the following vulnerability has been resolved:
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
Add the check for the return value of the ida_alloc in order to avoid
NULL pointer dereference.
Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order
to avoid memory leak.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122425-CVE-2023-54147-dafb@gregkh/T
2025-12-24
Published