CVE-2023-53425

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue was resolved in the Linux kernel’s media subsystem, specifically within the MediaTek VPU driver. The issue occurs when pdev is NULL and is still dereferenced, leading to a potential crash or unexpected behavior. This was identified through a smatch warning in the vpu load firmware() function located in drivers/media/platform/mediatek/vpu/mtk vpu.c at line 570.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.