In the Linux kernel, the following vulnerability has been resolved:
media: platform: mediatek: vpu: fix NULL ptr dereference
If pdev is NULL, then it is still dereferenced.
This fixes this smatch warning:
drivers/media/platform/mediatek/vpu/mtkvpu.c:570 vpuload_firmware() warn: address of NULL pointer 'pdev'
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53425.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53425.json"
[
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@776b34615a29551d69d82a0082e7319d5ea284bd",
"id": "CVE-2023-53425-4614b7e4",
"deprecated": false,
"target": {
"file": "drivers/media/platform/mtk-vpu/mtk_vpu.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"122104965864128719829785401690912710126",
"332675148542377050121053827004895225569",
"147005172712477744023137858108417052560",
"332798993642829793128832758802799858222",
"59027764407202271295700187772214776242",
"258753568009572490029059555624445181077",
"175789202576240357196727018362986002567",
"202721899772895598045560234137808483246",
"553186953678273205390417392346497293",
"984052666554087783905068535534300553"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@776b34615a29551d69d82a0082e7319d5ea284bd",
"id": "CVE-2023-53425-8cea939a",
"deprecated": false,
"target": {
"function": "vpu_load_firmware",
"file": "drivers/media/platform/mtk-vpu/mtk_vpu.c"
},
"signature_version": "v1",
"digest": {
"length": 1409.0,
"function_hash": "94253195813001969850814605224374744079"
}
}
]