CVE-2024-47753

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description A problem in the media section of the Linux kernel, specifically with the Mediatek VP8 stateless decoder, has been resolved. The issue led to a kernel crash when fb is NULL. This was due to a smatch static checker warning on vdec vp8 req if.c.

Recommendations For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider disabling the VP8 decoder functionality until a patch is available. Restrict access to the vulnerable vdec vp8 req if.c module to minimize the risk of exploitation.