CVE-2023-52888 media: mediatek: vcodec: Only free buffer VA that is not NULL

2024-07-3007:45:54

Linux

www.cve.org

linux kernel

mediatek vcodec

mtk_vcodec_mem_free

buffer va.

EPSS

Percentile

16.2%

JSON

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Only free buffer VA that is not NULL

In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly
called only when the buffer to free exists, there are some instances
that didn’t do the check and triggered warnings in practice.

We believe those checks were forgotten unintentionally. Add the checks
back to fix the warnings.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_av1_req_lat_if.c",
      "drivers/media/platform/mediatek/vcodec/encoder/venc/venc_h264_if.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f4",
        "lessThan": "5c217253c76c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f4",
        "lessThan": "303d01082eda",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f4",
        "lessThan": "eb005c801ec7",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_av1_req_lat_if.c",
      "drivers/media/platform/mediatek/vcodec/encoder/venc/venc_h264_if.c"
    ],
    "versions": [
      {
        "version": "6.6.39",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9.9",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]