CVE-2023-54143

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resource leak exists in the vdec msg queue init() function within the MediaTek VCodec component of the Linux kernel. Specifically, if allocation of msg queue->wdma addr fails, the function does not properly clean up resources before returning, leading to a memory leak. This occurs because the vdec msg queue deinit() function is bypassed in this error scenario. Additionally, two other error paths within the function also lacked proper resource cleanup. The issue is addressed by explicitly setting msg queue->wdma addr.size = 0 in error cases and redirecting error paths to mem alloc err.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.