CVE-2023-54147
media: platform: mtk-mdp3: Add missing check and free for ida_alloc
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the return value of the ida_alloc in order to avoid NULL pointer dereference. Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order to avoid memory leak.
Timeline
ID reserved
By Linux
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.20% · top 90% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 61890ccaefaff89f5babd2c8412fd222c3f5fe38 – < 51fc1880e47421ee7b192372e8e86b7bbba40776
- affected 61890ccaefaff89f5babd2c8412fd222c3f5fe38 – < 4c173a65a2b1cc0556c3f6f0bab82e4fdb449522
- affected 61890ccaefaff89f5babd2c8412fd222c3f5fe38 – < 22b72cad501fb75500cc60af4d92de3066fb6fc2
- affected 61890ccaefaff89f5babd2c8412fd222c3f5fe38 – < d00f592250782538cda87745607695b0fe27dcd4
- affected 6.1
- unaffected < 6.1
- unaffected 6.1.28 – ≤ 6.1.*
- unaffected 6.2.15 – ≤ 6.2.*
- unaffected 6.3.2 – ≤ 6.3.*
- unaffected 6.4 – ≤ *
References (4)
- https://git.kernel.org/stable/c/51fc1880e47421ee7b192372e8e86b7bbba40776 (opens in a new tab)
- https://git.kernel.org/stable/c/4c173a65a2b1cc0556c3f6f0bab82e4fdb449522 (opens in a new tab)
- https://git.kernel.org/stable/c/22b72cad501fb75500cc60af4d92de3066fb6fc2 (opens in a new tab)
- https://git.kernel.org/stable/c/d00f592250782538cda87745607695b0fe27dcd4 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-54147)Record last updated .