Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-bw98-1z6f-53he
Vulnerability ID VCID-bw98-1z6f-53he
Aliases CVE-2023-52888
Summary In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice. We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.
Status Published
Exploitability 0.5
Weighted Severity 3.7
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-415 Double Free
System Score Found at
cvssv3 4.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52888.json
epss 9e-05 https://api.first.org/data/v1/epss?cve=CVE-2023-52888
epss 9e-05 https://api.first.org/data/v1/epss?cve=CVE-2023-52888
epss 9e-05 https://api.first.org/data/v1/epss?cve=CVE-2023-52888
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc Track https://git.kernel.org/stable/c/303d01082edaf817ee2df53a40dca9da637a2c04
ssvc Track https://git.kernel.org/stable/c/5c217253c76c94f76d1df31d0bbdcb88dc07be91
ssvc Track https://git.kernel.org/stable/c/eb005c801ec70ff4307727bd3bd6e8280169ef32
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52888.json
https://api.first.org/data/v1/epss?cve=CVE-2023-52888
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52888
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2301461 https://bugzilla.redhat.com/show_bug.cgi?id=2301461
303d01082edaf817ee2df53a40dca9da637a2c04 https://git.kernel.org/stable/c/303d01082edaf817ee2df53a40dca9da637a2c04
5c217253c76c94f76d1df31d0bbdcb88dc07be91 https://git.kernel.org/stable/c/5c217253c76c94f76d1df31d0bbdcb88dc07be91
eb005c801ec70ff4307727bd3bd6e8280169ef32 https://git.kernel.org/stable/c/eb005c801ec70ff4307727bd3bd6e8280169ef32
USN-7089-1 https://usn.ubuntu.com/7089-1/
USN-7089-2 https://usn.ubuntu.com/7089-2/
USN-7089-3 https://usn.ubuntu.com/7089-3/
USN-7089-4 https://usn.ubuntu.com/7089-4/
USN-7089-5 https://usn.ubuntu.com/7089-5/
USN-7089-6 https://usn.ubuntu.com/7089-6/
USN-7089-7 https://usn.ubuntu.com/7089-7/
USN-7090-1 https://usn.ubuntu.com/7090-1/
USN-7095-1 https://usn.ubuntu.com/7095-1/
USN-7156-1 https://usn.ubuntu.com/7156-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52888.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T16:18:12Z/ Found at https://git.kernel.org/stable/c/303d01082edaf817ee2df53a40dca9da637a2c04
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T16:18:12Z/ Found at https://git.kernel.org/stable/c/5c217253c76c94f76d1df31d0bbdcb88dc07be91
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-10T16:18:12Z/ Found at https://git.kernel.org/stable/c/eb005c801ec70ff4307727bd3bd6e8280169ef32
Exploit Prediction Scoring System (EPSS)
Percentile 0.00949
EPSS Score 9e-05
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:47:59.616009+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0