CVE-2023-52888

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the MediaTek vcodec driver in the Linux kernel. The mtk vcodec mem free() function is mostly called when the buffer to free exists, but there are instances where this check is not performed, triggering warnings. It is believed that these checks were forgotten unintentionally. The fix involves adding the checks back to resolve the warnings. The vulnerability was resolved in vanilla upstream kernel version 6.6.43.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.