Vulnerability in Linux

CVE-2023-54147

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the return value of the ida_alloc in order to avoid NULL pointer dereference. Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order to avoid memory leak.

EPSS: 0.002 (7.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 61890ccaefaff89f5babd2c8412fd222c3f5fe38, 6.1, 0

References